Overview

overview

8

Static

static

3

0346821b1c...99.exe

windows7-x64

8

0346821b1c...99.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    16s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-10-2023 23:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0346821b1cb6c5b0d098647549055ba0027134de1b1dfe7b699031cc9b408d99.exe

  • Size

    3.4MB

  • MD5

    b0392934a0f6c6bef140c04a93e93102

  • SHA1

    a37eb60d91aa3dcf468a8a810ab4f32fddb3933a

  • SHA256

    0346821b1cb6c5b0d098647549055ba0027134de1b1dfe7b699031cc9b408d99

  • SHA512

    33081f58276c27af8de6fc3bac10c65abf16bd557627a953ed377e7f5be07d0a4bf531ca9a333a4227f13d19e58945a99063475d366b6ca20959e99b135571e6

  • SSDEEP

    49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlT4LFeHh+oKR/:Q+8X9G3vP3AMWLFeBc

Score
8/10
persistence

Malware Config

Signatures

  • Modifies Installed Components in the registry 2 TTPs 2 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 4 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks SCSI registry key(s) 3 TTPs 36 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies registry class 20 IoCs
  • Suspicious use of AdjustPrivilegeToken 38 IoCs
  • Suspicious use of FindShellTrayWindow 24 IoCs
  • Suspicious use of SendNotifyMessage 20 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\0346821b1cb6c5b0d098647549055ba0027134de1b1dfe7b699031cc9b408d99.exe
    "C:\Users\Admin\AppData\Local\Temp\0346821b1cb6c5b0d098647549055ba0027134de1b1dfe7b699031cc9b408d99.exe"
    1⤵
      PID:652
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:4444
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:4056
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:1080
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
        PID:3156
      • C:\Windows\explorer.exe
        explorer.exe
        1⤵
          PID:3680
        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
          1⤵
            PID:2700
          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
            1⤵
              PID:4052
            • C:\Windows\explorer.exe
              explorer.exe
              1⤵
                PID:4076
              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                1⤵
                  PID:2196
                • C:\Windows\explorer.exe
                  explorer.exe
                  1⤵
                    PID:2272
                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                    1⤵
                      PID:3872
                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                      1⤵
                        PID:1236
                      • C:\Windows\explorer.exe
                        explorer.exe
                        1⤵
                          PID:4036
                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                          1⤵
                            PID:1016
                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                            1⤵
                              PID:332
                            • C:\Windows\explorer.exe
                              explorer.exe
                              1⤵
                                PID:2308
                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                1⤵
                                  PID:3820
                                • C:\Windows\explorer.exe
                                  explorer.exe
                                  1⤵
                                    PID:560
                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                    1⤵
                                      PID:824
                                    • C:\Windows\explorer.exe
                                      explorer.exe
                                      1⤵
                                        PID:2700
                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                        1⤵
                                          PID:3940
                                        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                          1⤵
                                            PID:3972
                                          • C:\Windows\explorer.exe
                                            explorer.exe
                                            1⤵
                                              PID:3364
                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                              1⤵
                                                PID:4584
                                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                1⤵
                                                  PID:3312
                                                • C:\Windows\explorer.exe
                                                  explorer.exe
                                                  1⤵
                                                    PID:4192
                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                    1⤵
                                                      PID:2736
                                                    • C:\Windows\explorer.exe
                                                      explorer.exe
                                                      1⤵
                                                        PID:3472
                                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                        1⤵
                                                          PID:2228
                                                        • C:\Windows\explorer.exe
                                                          explorer.exe
                                                          1⤵
                                                            PID:2004
                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                            1⤵
                                                              PID:1820
                                                            • C:\Windows\explorer.exe
                                                              explorer.exe
                                                              1⤵
                                                                PID:1236
                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                1⤵
                                                                  PID:824
                                                                • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                  "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                  1⤵
                                                                    PID:3856
                                                                  • C:\Windows\explorer.exe
                                                                    explorer.exe
                                                                    1⤵
                                                                      PID:1648
                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                      1⤵
                                                                        PID:4960
                                                                      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                        1⤵
                                                                          PID:3472
                                                                        • C:\Windows\explorer.exe
                                                                          explorer.exe
                                                                          1⤵
                                                                            PID:2508
                                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                            1⤵
                                                                              PID:1192
                                                                            • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                              "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                              1⤵
                                                                                PID:2168
                                                                              • C:\Windows\explorer.exe
                                                                                explorer.exe
                                                                                1⤵
                                                                                  PID:1856
                                                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                  1⤵
                                                                                    PID:4892
                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                    1⤵
                                                                                      PID:4292
                                                                                    • C:\Windows\explorer.exe
                                                                                      explorer.exe
                                                                                      1⤵
                                                                                        PID:4044
                                                                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                        1⤵
                                                                                          PID:4912
                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                          1⤵
                                                                                            PID:3560
                                                                                          • C:\Windows\explorer.exe
                                                                                            explorer.exe
                                                                                            1⤵
                                                                                              PID:3396
                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                              1⤵
                                                                                                PID:2352
                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                1⤵
                                                                                                  PID:2508
                                                                                                • C:\Windows\explorer.exe
                                                                                                  explorer.exe
                                                                                                  1⤵
                                                                                                    PID:32
                                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                    1⤵
                                                                                                      PID:3720
                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                      1⤵
                                                                                                        PID:1912
                                                                                                      • C:\Windows\explorer.exe
                                                                                                        explorer.exe
                                                                                                        1⤵
                                                                                                          PID:1956
                                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                          1⤵
                                                                                                            PID:2196
                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                            1⤵
                                                                                                              PID:4392
                                                                                                            • C:\Windows\explorer.exe
                                                                                                              explorer.exe
                                                                                                              1⤵
                                                                                                                PID:1488
                                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                1⤵
                                                                                                                  PID:1368
                                                                                                                • C:\Windows\explorer.exe
                                                                                                                  explorer.exe
                                                                                                                  1⤵
                                                                                                                    PID:4348
                                                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                    1⤵
                                                                                                                      PID:4168
                                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                      1⤵
                                                                                                                        PID:1908
                                                                                                                      • C:\Windows\explorer.exe
                                                                                                                        explorer.exe
                                                                                                                        1⤵
                                                                                                                          PID:1936
                                                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                          1⤵
                                                                                                                            PID:3448
                                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                            1⤵
                                                                                                                              PID:3640
                                                                                                                            • C:\Windows\explorer.exe
                                                                                                                              explorer.exe
                                                                                                                              1⤵
                                                                                                                                PID:4560
                                                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                1⤵
                                                                                                                                  PID:1928
                                                                                                                                • C:\Windows\explorer.exe
                                                                                                                                  explorer.exe
                                                                                                                                  1⤵
                                                                                                                                    PID:1372
                                                                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                    1⤵
                                                                                                                                      PID:4628
                                                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                                      1⤵
                                                                                                                                        PID:2472

                                                                                                                                      Network

                                                                                                                                      MITRE ATT&CK Enterprise v15

                                                                                                                                      Replay Monitor

                                                                                                                                      Loading Replay Monitor...

                                                                                                                                      Downloads

                                                                                                                                      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
                                                                                                                                        Filesize

                                                                                                                                        471B

                                                                                                                                        MD5

                                                                                                                                        0085711bef17acad9eacf0bbf9bf3906

                                                                                                                                        SHA1

                                                                                                                                        20041eb81473c406da0ebfd7717231c0852ba344

                                                                                                                                        SHA256

                                                                                                                                        98c31705ae2dbde79cc8916db28c40c875597004ae24d94ac42433e0989d70a1

                                                                                                                                        SHA512

                                                                                                                                        3354239703701d843124bc466fd9794dd65ed766e4a1df64f784250292be3f24239a9e7156738d07a1c12316952cc1ee71ae9feba9b8fdbfb545e273ae871a6e

                                                                                                                                        Download Submit

                                                                                                                                      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
                                                                                                                                        Filesize

                                                                                                                                        412B

                                                                                                                                        MD5

                                                                                                                                        0ddeffb5fc7e52c361f7ea660dd170df

                                                                                                                                        SHA1

                                                                                                                                        4e3114c7177b67433a9ebf2e0c21e9c69bc6170e

                                                                                                                                        SHA256

                                                                                                                                        a647b2ecb70240261df93e609744df48b0abfbabb1481fdfe862d089f99609de

                                                                                                                                        SHA512

                                                                                                                                        4218c4592f91203dad580130ba464b8b3c93225d8c46abacfe5ad9aae79982452215476614891a1921f5e44c149e0dde38975469f58e3006ffabb2ac82c42ec0

                                                                                                                                        Download Submit

                                                                                                                                      • C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                        Filesize

                                                                                                                                        97B

                                                                                                                                        MD5

                                                                                                                                        88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                        SHA1

                                                                                                                                        ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                        SHA256

                                                                                                                                        fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                        SHA512

                                                                                                                                        197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                        Download Submit

                                                                                                                                      • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                        Filesize

                                                                                                                                        97B

                                                                                                                                        MD5

                                                                                                                                        88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                        SHA1

                                                                                                                                        ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                        SHA256

                                                                                                                                        fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                        SHA512

                                                                                                                                        197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                        Download Submit

                                                                                                                                      • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                        Filesize

                                                                                                                                        97B

                                                                                                                                        MD5

                                                                                                                                        88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                        SHA1

                                                                                                                                        ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                        SHA256

                                                                                                                                        fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                        SHA512

                                                                                                                                        197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                        Download Submit

                                                                                                                                      • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                        Filesize

                                                                                                                                        97B

                                                                                                                                        MD5

                                                                                                                                        88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                        SHA1

                                                                                                                                        ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                        SHA256

                                                                                                                                        fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                        SHA512

                                                                                                                                        197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                        Download Submit

                                                                                                                                      • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                        Filesize

                                                                                                                                        97B

                                                                                                                                        MD5

                                                                                                                                        88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                        SHA1

                                                                                                                                        ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                        SHA256

                                                                                                                                        fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                        SHA512

                                                                                                                                        197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                        Download Submit

                                                                                                                                      • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                        Filesize

                                                                                                                                        97B

                                                                                                                                        MD5

                                                                                                                                        88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                        SHA1

                                                                                                                                        ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                        SHA256

                                                                                                                                        fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                        SHA512

                                                                                                                                        197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                        Download Submit

                                                                                                                                      • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                        Filesize

                                                                                                                                        97B

                                                                                                                                        MD5

                                                                                                                                        88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                        SHA1

                                                                                                                                        ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                        SHA256

                                                                                                                                        fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                        SHA512

                                                                                                                                        197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                        Download Submit

                                                                                                                                      • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                        Filesize

                                                                                                                                        97B

                                                                                                                                        MD5

                                                                                                                                        88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                        SHA1

                                                                                                                                        ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                        SHA256

                                                                                                                                        fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                        SHA512

                                                                                                                                        197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                        Download Submit

                                                                                                                                      • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                        Filesize

                                                                                                                                        97B

                                                                                                                                        MD5

                                                                                                                                        88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                        SHA1

                                                                                                                                        ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                        SHA256

                                                                                                                                        fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                        SHA512

                                                                                                                                        197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                        Download Submit

                                                                                                                                      • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                        Filesize

                                                                                                                                        97B

                                                                                                                                        MD5

                                                                                                                                        88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                        SHA1

                                                                                                                                        ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                        SHA256

                                                                                                                                        fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                        SHA512

                                                                                                                                        197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                        Download Submit

                                                                                                                                      • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                        Filesize

                                                                                                                                        97B

                                                                                                                                        MD5

                                                                                                                                        88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                        SHA1

                                                                                                                                        ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                        SHA256

                                                                                                                                        fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                        SHA512

                                                                                                                                        197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                        Download Submit

                                                                                                                                      • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                        Filesize

                                                                                                                                        97B

                                                                                                                                        MD5

                                                                                                                                        88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                        SHA1

                                                                                                                                        ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                        SHA256

                                                                                                                                        fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                        SHA512

                                                                                                                                        197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                        Download Submit

                                                                                                                                      • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                        Filesize

                                                                                                                                        97B

                                                                                                                                        MD5

                                                                                                                                        88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                        SHA1

                                                                                                                                        ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                        SHA256

                                                                                                                                        fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                        SHA512

                                                                                                                                        197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                        Download Submit

                                                                                                                                      • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                        Filesize

                                                                                                                                        97B

                                                                                                                                        MD5

                                                                                                                                        88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                        SHA1

                                                                                                                                        ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                        SHA256

                                                                                                                                        fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                        SHA512

                                                                                                                                        197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                        Download Submit

                                                                                                                                      • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                        Filesize

                                                                                                                                        97B

                                                                                                                                        MD5

                                                                                                                                        88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                        SHA1

                                                                                                                                        ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                        SHA256

                                                                                                                                        fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                        SHA512

                                                                                                                                        197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                        Download Submit

                                                                                                                                      • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                        Filesize

                                                                                                                                        97B

                                                                                                                                        MD5

                                                                                                                                        88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                        SHA1

                                                                                                                                        ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                        SHA256

                                                                                                                                        fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                        SHA512

                                                                                                                                        197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                        Download Submit

                                                                                                                                      • memory/32-264-0x0000000004060000-0x0000000004061000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        4KB

                                                                                                                                        Download

                                                                                                                                      • memory/332-66-0x000001F77A600000-0x000001F77A620000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/332-63-0x000001F77A640000-0x000001F77A660000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/332-70-0x000001F77AAA0000-0x000001F77AAC0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/1236-42-0x0000028E80680000-0x0000028E806A0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/1236-40-0x0000028E806C0000-0x0000028E806E0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/1236-44-0x0000028E80B30000-0x0000028E80B50000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/1236-126-0x00000000045A0000-0x00000000045A1000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        4KB

                                                                                                                                        Download

                                                                                                                                      • memory/1372-357-0x0000000004730000-0x0000000004731000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        4KB

                                                                                                                                        Download

                                                                                                                                      • memory/1648-149-0x0000000004C30000-0x0000000004C31000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        4KB

                                                                                                                                        Download

                                                                                                                                      • memory/1856-195-0x0000000004B40000-0x0000000004B41000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        4KB

                                                                                                                                        Download

                                                                                                                                      • memory/1908-320-0x0000021A8D0B0000-0x0000021A8D0D0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/1908-316-0x0000021A8CC60000-0x0000021A8CC80000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/1908-318-0x0000021A8CC20000-0x0000021A8CC40000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/1912-272-0x000001E8774C0000-0x000001E8774E0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/1912-275-0x000001E877480000-0x000001E8774A0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/1912-278-0x000001E877AA0000-0x000001E877AC0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/1936-329-0x0000000004940000-0x0000000004941000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        4KB

                                                                                                                                        Download

                                                                                                                                      • memory/1956-285-0x0000000003E20000-0x0000000003E21000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        4KB

                                                                                                                                        Download

                                                                                                                                      • memory/2168-180-0x000001C450CE0000-0x000001C450D00000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/2168-183-0x000001C450CA0000-0x000001C450CC0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/2168-186-0x000001C451340000-0x000001C451360000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/2272-33-0x0000000004EB0000-0x0000000004EB1000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        4KB

                                                                                                                                        Download

                                                                                                                                      • memory/2472-367-0x000001DCAE3D0000-0x000001DCAE3F0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/2472-365-0x000001DCAE620000-0x000001DCAE640000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/2508-249-0x000001DE866B0000-0x000001DE866D0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/2508-172-0x0000000004B60000-0x0000000004B61000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        4KB

                                                                                                                                        Download

                                                                                                                                      • memory/2508-254-0x000001DE86D00000-0x000001DE86D20000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/2508-252-0x000001DE86670000-0x000001DE86690000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/2700-80-0x00000000031F0000-0x00000000031F1000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        4KB

                                                                                                                                        Download

                                                                                                                                      • memory/3312-111-0x000001D08D940000-0x000001D08D960000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/3312-114-0x000001D08D900000-0x000001D08D920000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/3312-118-0x000001D08DD20000-0x000001D08DD40000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/3364-103-0x0000000004090000-0x0000000004091000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        4KB

                                                                                                                                        Download

                                                                                                                                      • memory/3396-241-0x0000000004C10000-0x0000000004C11000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        4KB

                                                                                                                                        Download

                                                                                                                                      • memory/3472-157-0x000001BF36770000-0x000001BF36790000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/3472-164-0x000001BF36BF0000-0x000001BF36C10000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/3472-160-0x000001BF36730000-0x000001BF36750000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/3560-226-0x0000020EA39C0000-0x0000020EA39E0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/3560-229-0x0000020EA3980000-0x0000020EA39A0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/3560-232-0x0000020EA3D90000-0x0000020EA3DB0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/3640-341-0x0000020500770000-0x0000020500790000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/3640-336-0x0000020500320000-0x0000020500340000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/3640-339-0x00000204FFFE0000-0x0000020500000000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/3680-8-0x0000000004580000-0x0000000004581000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        4KB

                                                                                                                                        Download

                                                                                                                                      • memory/3856-134-0x0000016A032C0000-0x0000016A032E0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/3856-139-0x0000016A038A0000-0x0000016A038C0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/3856-137-0x0000016A03280000-0x0000016A032A0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/3972-92-0x0000023B90FD0000-0x0000023B90FF0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/3972-88-0x0000023B91320000-0x0000023B91340000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/3972-94-0x0000023B91770000-0x0000023B91790000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/4036-55-0x0000000004A80000-0x0000000004A81000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        4KB

                                                                                                                                        Download

                                                                                                                                      • memory/4044-218-0x0000000003F70000-0x0000000003F71000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        4KB

                                                                                                                                        Download

                                                                                                                                      • memory/4052-15-0x0000022EA8890000-0x0000022EA88B0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/4052-21-0x0000022EA8BF0000-0x0000022EA8C10000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/4052-19-0x0000022EA8870000-0x0000022EA8890000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/4052-17-0x0000022EA8850000-0x0000022EA8870000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/4292-205-0x00000235DF2B0000-0x00000235DF2D0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/4292-203-0x00000235DF2F0000-0x00000235DF310000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/4292-207-0x00000235DF980000-0x00000235DF9A0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/4348-309-0x0000000004A10000-0x0000000004A11000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        4KB

                                                                                                                                        Download

                                                                                                                                      • memory/4392-297-0x0000022354080000-0x00000223540A0000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/4392-294-0x0000022353C00000-0x0000022353C20000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download

                                                                                                                                      • memory/4392-292-0x0000022353C40000-0x0000022353C60000-memory.dmp

                                                                                                                                        Filesize

                                                                                                                                        128KB

                                                                                                                                        Download