Overview

overview

8

Static

static

3

cf06b743da...9e.exe

windows7-x64

8

cf06b743da...9e.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    13s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 04:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    cf06b743da6def4b7212836fdd1b4a42169a6b6333f8d754c7ccbb318622c99e.exe

  • Size

    3.4MB

  • MD5

    18340b4202a832708fd19e7629130c64

  • SHA1

    a63c8e56233e767feabe9dbc1ab96477ab2f52af

  • SHA256

    cf06b743da6def4b7212836fdd1b4a42169a6b6333f8d754c7ccbb318622c99e

  • SHA512

    e768b252bd0e3091b7fca1f8a599d4dcb3de0f3728b6083a37c95ca34fead5af8a97f70a5e25cb413ebaad3cda228250d17fdae5aec8cf745d1e75594cebefd9

  • SSDEEP

    49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlGqp/k9kDxeUlgiwOpxZd:c+8X9G3vP3AM4qrMZi9xZd

Score
8/10
persistence

Malware Config

Signatures

  • Modifies Installed Components in the registry 2 TTPs 2 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 4 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies registry class 21 IoCs
  • Suspicious use of AdjustPrivilegeToken 46 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 21 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\cf06b743da6def4b7212836fdd1b4a42169a6b6333f8d754c7ccbb318622c99e.exe
    "C:\Users\Admin\AppData\Local\Temp\cf06b743da6def4b7212836fdd1b4a42169a6b6333f8d754c7ccbb318622c99e.exe"
    1⤵
      PID:1168
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:3980
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:452
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:4552
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
        PID:4992
      • C:\Windows\explorer.exe
        explorer.exe
        1⤵
          PID:1164
        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
          1⤵
            PID:3320
          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
            1⤵
              PID:2188
            • C:\Windows\explorer.exe
              explorer.exe
              1⤵
                PID:3252
              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                1⤵
                  PID:3264
                • C:\Windows\explorer.exe
                  explorer.exe
                  1⤵
                    PID:4740
                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                    1⤵
                      PID:1724
                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                      1⤵
                        PID:4852
                      • C:\Windows\explorer.exe
                        explorer.exe
                        1⤵
                          PID:3280
                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                          1⤵
                            PID:1164
                          • C:\Windows\explorer.exe
                            explorer.exe
                            1⤵
                              PID:5088
                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                              1⤵
                                PID:4092
                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                1⤵
                                  PID:1476
                                • C:\Windows\explorer.exe
                                  explorer.exe
                                  1⤵
                                    PID:4164
                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                    1⤵
                                      PID:1968
                                    • C:\Windows\explorer.exe
                                      explorer.exe
                                      1⤵
                                        PID:2824
                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                        1⤵
                                          PID:2920
                                        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                          1⤵
                                            PID:3320
                                          • C:\Windows\explorer.exe
                                            explorer.exe
                                            1⤵
                                              PID:232
                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                              1⤵
                                                PID:4372
                                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                1⤵
                                                  PID:4040
                                                • C:\Windows\explorer.exe
                                                  explorer.exe
                                                  1⤵
                                                    PID:2160
                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                    1⤵
                                                      PID:2176
                                                    • C:\Windows\explorer.exe
                                                      explorer.exe
                                                      1⤵
                                                        PID:3304
                                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                        1⤵
                                                          PID:3272
                                                        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                          1⤵
                                                            PID:3996
                                                          • C:\Windows\explorer.exe
                                                            explorer.exe
                                                            1⤵
                                                              PID:2136
                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                              1⤵
                                                                PID:4828
                                                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                1⤵
                                                                  PID:2368
                                                                • C:\Windows\explorer.exe
                                                                  explorer.exe
                                                                  1⤵
                                                                    PID:4064
                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                    1⤵
                                                                      PID:2988
                                                                    • C:\Windows\explorer.exe
                                                                      explorer.exe
                                                                      1⤵
                                                                        PID:3704
                                                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                        1⤵
                                                                          PID:2876
                                                                        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                          1⤵
                                                                            PID:1968
                                                                          • C:\Windows\explorer.exe
                                                                            explorer.exe
                                                                            1⤵
                                                                              PID:3584
                                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                              1⤵
                                                                                PID:4740
                                                                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                1⤵
                                                                                  PID:1444
                                                                                • C:\Windows\explorer.exe
                                                                                  explorer.exe
                                                                                  1⤵
                                                                                    PID:2632
                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                    1⤵
                                                                                      PID:2700
                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                      1⤵
                                                                                        PID:1476
                                                                                      • C:\Windows\explorer.exe
                                                                                        explorer.exe
                                                                                        1⤵
                                                                                          PID:3980
                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                          1⤵
                                                                                            PID:4324
                                                                                          • C:\Windows\explorer.exe
                                                                                            explorer.exe
                                                                                            1⤵
                                                                                              PID:1444
                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                              1⤵
                                                                                                PID:4792
                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                1⤵
                                                                                                  PID:2160
                                                                                                • C:\Windows\explorer.exe
                                                                                                  explorer.exe
                                                                                                  1⤵
                                                                                                    PID:3412
                                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                    1⤵
                                                                                                      PID:3508
                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                      1⤵
                                                                                                        PID:3256
                                                                                                      • C:\Windows\explorer.exe
                                                                                                        explorer.exe
                                                                                                        1⤵
                                                                                                          PID:636
                                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                          1⤵
                                                                                                            PID:3540
                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                            1⤵
                                                                                                              PID:3480
                                                                                                            • C:\Windows\explorer.exe
                                                                                                              explorer.exe
                                                                                                              1⤵
                                                                                                                PID:692
                                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                1⤵
                                                                                                                  PID:4004
                                                                                                                • C:\Windows\explorer.exe
                                                                                                                  explorer.exe
                                                                                                                  1⤵
                                                                                                                    PID:2960
                                                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                    1⤵
                                                                                                                      PID:2196
                                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                      1⤵
                                                                                                                        PID:3492
                                                                                                                      • C:\Windows\explorer.exe
                                                                                                                        explorer.exe
                                                                                                                        1⤵
                                                                                                                          PID:1116
                                                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                          1⤵
                                                                                                                            PID:3288
                                                                                                                          • C:\Windows\explorer.exe
                                                                                                                            explorer.exe
                                                                                                                            1⤵
                                                                                                                              PID:2684
                                                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                              1⤵
                                                                                                                                PID:4376
                                                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                1⤵
                                                                                                                                  PID:1316
                                                                                                                                • C:\Windows\explorer.exe
                                                                                                                                  explorer.exe
                                                                                                                                  1⤵
                                                                                                                                    PID:632
                                                                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                    1⤵
                                                                                                                                      PID:3384
                                                                                                                                    • C:\Windows\explorer.exe
                                                                                                                                      explorer.exe
                                                                                                                                      1⤵
                                                                                                                                        PID:3488
                                                                                                                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                        1⤵
                                                                                                                                          PID:4828
                                                                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                                          1⤵
                                                                                                                                            PID:3444

                                                                                                                                          Network

                                                                                                                                          MITRE ATT&CK Enterprise v15

                                                                                                                                          Replay Monitor

                                                                                                                                          Loading Replay Monitor...

                                                                                                                                          Downloads

                                                                                                                                          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
                                                                                                                                            Filesize

                                                                                                                                            471B

                                                                                                                                            MD5

                                                                                                                                            56f8fa6aa59f3ee1aa24361d930a52d4

                                                                                                                                            SHA1

                                                                                                                                            2b43132dcfbedcd28adb4e03c2c90290f81816b8

                                                                                                                                            SHA256

                                                                                                                                            066a23f715a61c55ba3c4cae2e214a473fa4c3cf3a4bf963f323c62bba98e0d2

                                                                                                                                            SHA512

                                                                                                                                            46312236d22521e8e7d96ba38f411420a6e231d029a09bcfe57154fe670526ea36159572cca9c8fd2b43c7b2948e3a05b09f3fc98a5734079dfd7bc2db5ec15a

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
                                                                                                                                            Filesize

                                                                                                                                            412B

                                                                                                                                            MD5

                                                                                                                                            02b59c791e0c4653f9eb6c922e4ca103

                                                                                                                                            SHA1

                                                                                                                                            019457c41f26faede651ac6037ea517d8cf6487f

                                                                                                                                            SHA256

                                                                                                                                            3633f09fc71b8a6e903645f7c58a4460bd175a3dd61f972f2d298d7eb714c2f3

                                                                                                                                            SHA512

                                                                                                                                            90b1d538eeb89fa11b12442ddd0744faeb71e4a7e1e9dcb2a1d16857ed132d62a9416282de13333ff6c78f2f22bf3e4797fc161aeeeceb6bad3bbd22226c82b2

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                            SHA1

                                                                                                                                            ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                            SHA256

                                                                                                                                            fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                            SHA512

                                                                                                                                            197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                            SHA1

                                                                                                                                            ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                            SHA256

                                                                                                                                            fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                            SHA512

                                                                                                                                            197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                            SHA1

                                                                                                                                            ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                            SHA256

                                                                                                                                            fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                            SHA512

                                                                                                                                            197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                            SHA1

                                                                                                                                            ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                            SHA256

                                                                                                                                            fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                            SHA512

                                                                                                                                            197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                            SHA1

                                                                                                                                            ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                            SHA256

                                                                                                                                            fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                            SHA512

                                                                                                                                            197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                            SHA1

                                                                                                                                            ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                            SHA256

                                                                                                                                            fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                            SHA512

                                                                                                                                            197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                            SHA1

                                                                                                                                            ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                            SHA256

                                                                                                                                            fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                            SHA512

                                                                                                                                            197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                            SHA1

                                                                                                                                            ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                            SHA256

                                                                                                                                            fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                            SHA512

                                                                                                                                            197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                            SHA1

                                                                                                                                            ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                            SHA256

                                                                                                                                            fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                            SHA512

                                                                                                                                            197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                            SHA1

                                                                                                                                            ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                            SHA256

                                                                                                                                            fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                            SHA512

                                                                                                                                            197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                            SHA1

                                                                                                                                            ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                            SHA256

                                                                                                                                            fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                            SHA512

                                                                                                                                            197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                            SHA1

                                                                                                                                            ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                            SHA256

                                                                                                                                            fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                            SHA512

                                                                                                                                            197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                            SHA1

                                                                                                                                            ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                            SHA256

                                                                                                                                            fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                            SHA512

                                                                                                                                            197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                            SHA1

                                                                                                                                            ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                            SHA256

                                                                                                                                            fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                            SHA512

                                                                                                                                            197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\TEK1SANF\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            88e99175b1b7d310e0fbe53c60d388c3

                                                                                                                                            SHA1

                                                                                                                                            ac3c326df344a8240d9abf82eff3ef99eae6b430

                                                                                                                                            SHA256

                                                                                                                                            fea3a8d15530a744cbbd8c0b32672badcbd06fd19b2e311600c1bc016de37af2

                                                                                                                                            SHA512

                                                                                                                                            197b140abfc809b8da6348b2340ff93c06244a188f12ab0307877792597f36dbebc2c004ea1987c5b7dc5f9786f99a2201e655852c4e7ae6195400f1fe212154

                                                                                                                                            Download Submit

                                                                                                                                          • memory/232-104-0x0000000004F30000-0x0000000004F31000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/636-286-0x0000000004A40000-0x0000000004A41000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/1164-8-0x00000000049A0000-0x00000000049A1000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/1444-207-0x0000028147160000-0x0000028147180000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/1444-205-0x0000028146AC0000-0x0000028146AE0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/1444-241-0x0000000004100000-0x0000000004101000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/1444-202-0x0000028146B00000-0x0000028146B20000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/1476-64-0x00000259C52D0000-0x00000259C52F0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/1476-225-0x000001F588D60000-0x000001F588D80000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/1476-66-0x00000259C5290000-0x00000259C52B0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/1476-231-0x000001F589210000-0x000001F589230000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/1476-228-0x000001F588D20000-0x000001F588D40000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/1476-68-0x00000259C5740000-0x00000259C5760000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/1968-179-0x0000025F95800000-0x0000025F95820000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/1968-181-0x0000025F957C0000-0x0000025F957E0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/1968-184-0x0000025F95BD0000-0x0000025F95BF0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2136-148-0x0000000005080000-0x0000000005081000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/2160-249-0x000001AF3BB70000-0x000001AF3BB90000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2160-252-0x000001AF3BB30000-0x000001AF3BB50000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2160-254-0x000001AF3BF40000-0x000001AF3BF60000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2188-15-0x000001C3DBD00000-0x000001C3DBD20000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2188-17-0x000001C3DB9C0000-0x000001C3DB9E0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2188-19-0x000001C3DC0D0000-0x000001C3DC0F0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2368-158-0x00000188D5680000-0x00000188D56A0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2368-161-0x00000188D5B20000-0x00000188D5B40000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2368-155-0x00000188D56C0000-0x00000188D56E0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2632-217-0x0000000004140000-0x0000000004141000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/2684-329-0x0000000004650000-0x0000000004651000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/2824-81-0x00000000048F0000-0x00000000048F1000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/2960-308-0x0000000002DB0000-0x0000000002DB1000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/3256-279-0x0000015A3E580000-0x0000015A3E5A0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3256-282-0x0000015A3E540000-0x0000015A3E560000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3256-275-0x0000015A3E170000-0x0000015A3E190000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3256-272-0x0000015A3E1B0000-0x0000015A3E1D0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3304-127-0x0000000004DC0000-0x0000000004DC1000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/3320-93-0x000001504B570000-0x000001504B590000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3320-91-0x000001504B160000-0x000001504B180000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3320-88-0x000001504B1A0000-0x000001504B1C0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3412-264-0x00000000044C0000-0x00000000044C1000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/3444-369-0x000001DD9E330000-0x000001DD9E350000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3444-366-0x000001DD9E370000-0x000001DD9E390000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3480-294-0x0000026A1C290000-0x0000026A1C2B0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3480-292-0x0000026A1C2D0000-0x0000026A1C2F0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3480-297-0x0000026A1C930000-0x0000026A1C950000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3488-358-0x0000000004300000-0x0000000004301000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/3492-319-0x0000026D8CA90000-0x0000026D8CAB0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3492-322-0x0000026D8D130000-0x0000026D8D150000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3492-316-0x0000026D8CAD0000-0x0000026D8CAF0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3584-194-0x0000000004CC0000-0x0000000004CC1000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/3704-171-0x0000000004630000-0x0000000004631000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/3996-138-0x000001F906FF0000-0x000001F907010000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3996-140-0x000001F9076A0000-0x000001F9076C0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3996-135-0x000001F907030000-0x000001F907050000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4040-111-0x00000205FC060000-0x00000205FC080000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4040-113-0x00000205FC020000-0x00000205FC040000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4040-115-0x00000205FC420000-0x00000205FC440000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4376-337-0x000001F3AB600000-0x000001F3AB620000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4376-341-0x000001F3AB5C0000-0x000001F3AB5E0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4376-344-0x000001F3AB9D0000-0x000001F3AB9F0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4740-31-0x0000000004220000-0x0000000004221000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/4852-45-0x000002C52AC10000-0x000002C52AC30000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4852-43-0x000002C52A800000-0x000002C52A820000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4852-39-0x000002C52A840000-0x000002C52A860000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/5088-56-0x0000000004680000-0x0000000004681000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download