Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
13/09/2024, 03:21
General
-
Target
77d0ef49a35c093be3e115bd25551860N.exe
-
Size
299KB
-
MD5
77d0ef49a35c093be3e115bd25551860
-
SHA1
5b6f55d5565e65355cbccb87a131a18865731ba9
-
SHA256
fb7a18f8a1cc2ba63fec0bd263c0bee75ce2ffa8b16c8649fdb630345d2fde8b
-
SHA512
82172479f3f6160b001855b733507c40ff4e97878cef75c36a6a98fb1ed9e55bebd0e12da12a30a7112340bff76177610587a9af101ec82069bfe85cf211f95b
-
SSDEEP
6144:L+k5XLaJbcplKJmxOYO3rLPFE2NJOdK/wmAQQQQQQQQQQQQQQQQQQQQQQQQQQQQz:t+JbMJqfFE27P90
Score
10/10
Malware Config
Signatures
-
Modifies visiblity of hidden/system files in Explorer 2 TTPs 1 IoCs
-
Executes dropped EXE 64 IoCs
-
Loads dropped DLL 64 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of SetThreadContext 64 IoCs
-
Drops file in Windows directory 64 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 64 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 64 IoCs
-
Suspicious use of WriteProcessMemory 64 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\77d0ef49a35c093be3e115bd25551860N.exe"C:\Users\Admin\AppData\Local\Temp\77d0ef49a35c093be3e115bd25551860N.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\77d0ef49a35c093be3e115bd25551860N.exeC:\Users\Admin\AppData\Local\Temp\77d0ef49a35c093be3e115bd25551860N.exe2⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe3⤵
- Executes dropped EXE
- Suspicious use of SetThreadContext
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe4⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe4⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe4⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe4⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe4⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe4⤵
- Modifies visiblity of hidden/system files in Explorer
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Executes dropped EXE
- Suspicious use of SetThreadContext
- Suspicious behavior: EnumeratesProcesses
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
-
-
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe5⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
- Suspicious behavior: EnumeratesProcesses
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
- Suspicious behavior: EnumeratesProcesses
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Executes dropped EXE
- Suspicious use of SetThreadContext
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
- Drops file in Windows directory
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Executes dropped EXE
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Executes dropped EXE
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Executes dropped EXE
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Executes dropped EXE
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
- Drops file in Windows directory
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Executes dropped EXE
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Executes dropped EXE
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Executes dropped EXE
- Suspicious use of SetThreadContext
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- Executes dropped EXE
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- Suspicious use of SetWindowsHookEx
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Loads dropped DLL
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Suspicious use of SetWindowsHookEx
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Loads dropped DLL
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Suspicious use of SetWindowsHookEx
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- Suspicious use of SetWindowsHookEx
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Loads dropped DLL
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Suspicious use of SetWindowsHookEx
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Loads dropped DLL
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Suspicious use of SetWindowsHookEx
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- Suspicious use of SetWindowsHookEx
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Loads dropped DLL
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- Suspicious use of SetWindowsHookEx
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Suspicious use of SetThreadContext
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- Suspicious use of SetWindowsHookEx
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Loads dropped DLL
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Loads dropped DLL
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Loads dropped DLL
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Loads dropped DLL
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Suspicious use of SetThreadContext
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- System Location Discovery: System Language Discovery
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Loads dropped DLL
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Loads dropped DLL
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Suspicious use of SetThreadContext
- Drops file in Windows directory
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Suspicious use of SetThreadContext
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- System Location Discovery: System Language Discovery
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Suspicious use of SetThreadContext
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Suspicious use of SetThreadContext
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Suspicious use of SetThreadContext
- Drops file in Windows directory
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Suspicious use of SetThreadContext
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Suspicious use of SetThreadContext
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Suspicious use of SetThreadContext
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- System Location Discovery: System Language Discovery
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- System Location Discovery: System Language Discovery
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- System Location Discovery: System Language Discovery
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- System Location Discovery: System Language Discovery
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- System Location Discovery: System Language Discovery
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- System Location Discovery: System Language Discovery
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- System Location Discovery: System Language Discovery
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- System Location Discovery: System Language Discovery
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- System Location Discovery: System Language Discovery
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
- System Location Discovery: System Language Discovery
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
- Drops file in Windows directory
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe7⤵
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
-
-
\??\c:\windows\resources\themes\explorer.exec:\windows\resources\themes\explorer.exe8⤵
- System Location Discovery: System Language Discovery
-
-
-
-
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe SE5⤵
-
\??\c:\windows\resources\spoolsv.exec:\windows\resources\spoolsv.exe6⤵
-
-
-
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
299KB
MD58197f51af8265556ef96890613e8afcc
SHA1582abe4e480afa0c1e1c9a956078503f7753abfb
SHA25697f869ea953d81bc90c6d95d32812a9a284527f8f0e5a22149abca8526902771
SHA5123729e70e4c52b753662edbc15cc06f1c22d7237e519a32f8525e49f181845d80f31d7052b8e5881e05e37b1bfe8eaf8884826e5029e93379c5ee967413f21495
-
Filesize
299KB
MD52551d72665ad9a8bf27161a50fe5edb3
SHA1e87bc7cf10e43226f3bb946837dc40f90dfba29a
SHA256f7fd07d3d355fa38ce9db905c85efff4cdf80bcef8cf812d725a33cb8416a777
SHA512e5e487f0be2c0b34a434311f27133ec4307c04d9062ebd95e259302f8056d78c3dc2ae5bcb10e96fe844774f7021ce0d60a2528e233167c41f4540f68c846dc3
-
Filesize
248KB
-
Filesize
4KB
-
Filesize
1024KB
-
Filesize
4KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
4KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
12.1MB
-
Filesize
12.1MB
-
Filesize
12.1MB
-
Filesize
4KB
-
Filesize
12.1MB
-
Filesize
12.1MB
-
Filesize
12.1MB
-
Filesize
12.1MB
-
Filesize
12.1MB
-
Filesize
20KB