Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

comprobant...go.exe

windows10-ltsc 2021-x64

10

Skyldsflelsers.ps1

windows10-ltsc 2021-x64

8

Analysis

  • max time kernel
    47s
  • max time network
    151s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20250217-es
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20250217-eslocale:es-esos:windows10-ltsc 2021-x64systemwindows
  • submitted
    12/03/2025, 11:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Skyldsflelsers.ps1

  • Size

    51KB

  • MD5

    550953a2f63ed2b48ebf6f76343105dc

  • SHA1

    f9425cafc739b32c655b05afdf9a5930337f2a54

  • SHA256

    f4c99919eaf75b521f3e08ec3e4378cc546a07de51735e48d7cf9110a4afec3c

  • SHA512

    956bb1f66503873a3b721875123c485ca47e7f9f9ce14ce451a2a4b0f1c705b40774ac1569bdb41e83758e880586e1f7740598b3112744e0b68720ae4e0deab3

  • SSDEEP

    768:iPi38zuk1tqO6kIRVOfsWD1psa71w+Mig6SR2hCWmm4oOr7G0ugpS12n:MAOlrJAOUCfj1w/ig6SR2uqOrbb

Score
8/10
executionpersistence

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 9 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Enumerates connected drives 3 TTPs 18 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 21 IoCs
  • Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

    Using powershell.exe command.

    execution
  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 14 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 9 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 33 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\Skyldsflelsers.ps1
    1⤵
    • Command and Scripting Interpreter: PowerShell
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3108
  • C:\Windows\explorer.exe
    explorer.exe
    1⤵
    • Boot or Logon Autostart Execution: Active Setup
    • Enumerates connected drives
    • Drops file in Windows directory
    • Checks SCSI registry key(s)
    • Modifies registry class
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:4032
  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4624
  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2068
  • C:\Windows\explorer.exe
    explorer.exe
    1⤵
    • Boot or Logon Autostart Execution: Active Setup
    • Enumerates connected drives
    • Checks SCSI registry key(s)
    • Modifies registry class
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:2304
  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2288
  • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
    "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
    1⤵
    • Modifies Internet Explorer settings
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:4008
  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2464
  • C:\Windows\explorer.exe
    explorer.exe
    1⤵
    • Boot or Logon Autostart Execution: Active Setup
    • Enumerates connected drives
    • Checks SCSI registry key(s)
    • Modifies registry class
    • Suspicious use of SendNotifyMessage
    PID:4584
  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1124
  • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
    "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
    1⤵
    • Modifies Internet Explorer settings
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:476
  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4276
  • C:\Windows\explorer.exe
    explorer.exe
    1⤵
    • Boot or Logon Autostart Execution: Active Setup
    • Enumerates connected drives
    • Checks SCSI registry key(s)
    • Suspicious use of SendNotifyMessage
    PID:4104
  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2092
  • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
    "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
    1⤵
    • Modifies Internet Explorer settings
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:3920
  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4960
  • C:\Windows\explorer.exe
    explorer.exe
    1⤵
    • Boot or Logon Autostart Execution: Active Setup
    • Enumerates connected drives
    • Checks SCSI registry key(s)
    • Modifies registry class
    PID:3532
  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4228
  • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
    "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
    1⤵
    • Modifies Internet Explorer settings
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:2052
  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3232
  • C:\Windows\explorer.exe
    explorer.exe
    1⤵
    • Boot or Logon Autostart Execution: Active Setup
    • Enumerates connected drives
    • Checks SCSI registry key(s)
    • Modifies registry class
    PID:3324
  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1948
  • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
    "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
    1⤵
    • Modifies Internet Explorer settings
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:2724
  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4452
  • C:\Windows\explorer.exe
    explorer.exe
    1⤵
    • Boot or Logon Autostart Execution: Active Setup
    • Enumerates connected drives
    • Checks SCSI registry key(s)
    • Modifies registry class
    PID:4100
  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3868
  • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
    "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
    1⤵
    • Modifies Internet Explorer settings
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:1732
  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3612
  • C:\Windows\explorer.exe
    explorer.exe
    1⤵
    • Boot or Logon Autostart Execution: Active Setup
    • Enumerates connected drives
    • Checks SCSI registry key(s)
    • Modifies registry class
    PID:1384
  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:5004
  • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
    "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
    1⤵
    • Modifies Internet Explorer settings
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:3108
  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1252
  • C:\Windows\explorer.exe
    explorer.exe
    1⤵
    • Boot or Logon Autostart Execution: Active Setup
    • Enumerates connected drives
    • Checks SCSI registry key(s)
    • Modifies registry class
    PID:4204
  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2468
  • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
    "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3684
  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
    1⤵
      PID:1092
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
        PID:1624
      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
        1⤵
          PID:2220
        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
          1⤵
            PID:2924
          • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
            "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
            1⤵
              PID:1504
            • C:\Windows\explorer.exe
              explorer.exe
              1⤵
                PID:3528
              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                1⤵
                  PID:5032
                • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                  "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                  1⤵
                    PID:4804
                  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
                    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
                    1⤵
                      PID:4164
                    • C:\Windows\explorer.exe
                      explorer.exe
                      1⤵
                        PID:1016
                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                        1⤵
                          PID:384
                        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                          1⤵
                            PID:2120
                          • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
                            "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
                            1⤵
                              PID:4168
                            • C:\Windows\explorer.exe
                              explorer.exe
                              1⤵
                                PID:3792
                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                1⤵
                                  PID:4484
                                • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                  "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                  1⤵
                                    PID:3360
                                  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
                                    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
                                    1⤵
                                      PID:1116
                                    • C:\Windows\explorer.exe
                                      explorer.exe
                                      1⤵
                                        PID:4284
                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                        1⤵
                                          PID:848
                                        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                          1⤵
                                            PID:2276
                                          • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
                                            "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
                                            1⤵
                                              PID:3972
                                            • C:\Windows\explorer.exe
                                              explorer.exe
                                              1⤵
                                                PID:2348
                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                1⤵
                                                  PID:5092
                                                • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                  "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                  1⤵
                                                    PID:5056
                                                  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
                                                    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
                                                    1⤵
                                                      PID:5016
                                                    • C:\Windows\explorer.exe
                                                      explorer.exe
                                                      1⤵
                                                        PID:3888
                                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                        1⤵
                                                          PID:4016
                                                        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                          1⤵
                                                            PID:5072
                                                          • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
                                                            "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
                                                            1⤵
                                                              PID:1572
                                                            • C:\Windows\explorer.exe
                                                              explorer.exe
                                                              1⤵
                                                                PID:2140
                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                1⤵
                                                                  PID:5064
                                                                • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
                                                                  "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
                                                                  1⤵
                                                                    PID:3724
                                                                  • C:\Windows\explorer.exe
                                                                    explorer.exe
                                                                    1⤵
                                                                      PID:4164
                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                      1⤵
                                                                        PID:3672
                                                                      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                        1⤵
                                                                          PID:3172
                                                                        • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
                                                                          "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
                                                                          1⤵
                                                                            PID:3360
                                                                          • C:\Windows\explorer.exe
                                                                            explorer.exe
                                                                            1⤵
                                                                              PID:884
                                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                              1⤵
                                                                                PID:3872
                                                                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                1⤵
                                                                                  PID:4556
                                                                                • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
                                                                                  "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
                                                                                  1⤵
                                                                                    PID:2028
                                                                                  • C:\Windows\explorer.exe
                                                                                    explorer.exe
                                                                                    1⤵
                                                                                      PID:1620
                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                      1⤵
                                                                                        PID:2528
                                                                                      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                        1⤵
                                                                                          PID:5104
                                                                                        • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
                                                                                          "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
                                                                                          1⤵
                                                                                            PID:2676
                                                                                          • C:\Windows\explorer.exe
                                                                                            explorer.exe
                                                                                            1⤵
                                                                                              PID:376
                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                              1⤵
                                                                                                PID:2160
                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                1⤵
                                                                                                  PID:5032
                                                                                                • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
                                                                                                  "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
                                                                                                  1⤵
                                                                                                    PID:5020
                                                                                                  • C:\Windows\explorer.exe
                                                                                                    explorer.exe
                                                                                                    1⤵
                                                                                                      PID:5052
                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                      1⤵
                                                                                                        PID:4108
                                                                                                      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                        1⤵
                                                                                                          PID:3684
                                                                                                        • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
                                                                                                          "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
                                                                                                          1⤵
                                                                                                            PID:1096
                                                                                                          • C:\Windows\explorer.exe
                                                                                                            explorer.exe
                                                                                                            1⤵
                                                                                                              PID:2092
                                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                              1⤵
                                                                                                                PID:3724
                                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                1⤵
                                                                                                                  PID:464
                                                                                                                • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
                                                                                                                  "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
                                                                                                                  1⤵
                                                                                                                    PID:4328
                                                                                                                  • C:\Windows\explorer.exe
                                                                                                                    explorer.exe
                                                                                                                    1⤵
                                                                                                                      PID:1040
                                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                      1⤵
                                                                                                                        PID:4112
                                                                                                                      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                        1⤵
                                                                                                                          PID:4572
                                                                                                                        • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
                                                                                                                          "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
                                                                                                                          1⤵
                                                                                                                            PID:3864
                                                                                                                          • C:\Windows\explorer.exe
                                                                                                                            explorer.exe
                                                                                                                            1⤵
                                                                                                                              PID:3856
                                                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                              1⤵
                                                                                                                                PID:2236
                                                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                                1⤵
                                                                                                                                  PID:4620
                                                                                                                                • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
                                                                                                                                  "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
                                                                                                                                  1⤵
                                                                                                                                    PID:4692
                                                                                                                                  • C:\Windows\explorer.exe
                                                                                                                                    explorer.exe
                                                                                                                                    1⤵
                                                                                                                                      PID:4984
                                                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                      1⤵
                                                                                                                                        PID:1136
                                                                                                                                      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                                        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                                        1⤵
                                                                                                                                          PID:5064
                                                                                                                                        • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
                                                                                                                                          "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
                                                                                                                                          1⤵
                                                                                                                                            PID:2652
                                                                                                                                          • C:\Windows\explorer.exe
                                                                                                                                            explorer.exe
                                                                                                                                            1⤵
                                                                                                                                              PID:1256
                                                                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                              1⤵
                                                                                                                                                PID:3768
                                                                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                                                1⤵
                                                                                                                                                  PID:5112
                                                                                                                                                • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
                                                                                                                                                  "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
                                                                                                                                                  1⤵
                                                                                                                                                    PID:4876
                                                                                                                                                  • C:\Windows\explorer.exe
                                                                                                                                                    explorer.exe
                                                                                                                                                    1⤵
                                                                                                                                                      PID:4672
                                                                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                      1⤵
                                                                                                                                                        PID:3996
                                                                                                                                                      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                                                        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                                                        1⤵
                                                                                                                                                          PID:4228
                                                                                                                                                        • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
                                                                                                                                                          "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
                                                                                                                                                          1⤵
                                                                                                                                                            PID:1624
                                                                                                                                                          • C:\Windows\explorer.exe
                                                                                                                                                            explorer.exe
                                                                                                                                                            1⤵
                                                                                                                                                              PID:624
                                                                                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                              1⤵
                                                                                                                                                                PID:4144
                                                                                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                                                                1⤵
                                                                                                                                                                  PID:3704
                                                                                                                                                                • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
                                                                                                                                                                  "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
                                                                                                                                                                  1⤵
                                                                                                                                                                    PID:4888
                                                                                                                                                                  • C:\Windows\explorer.exe
                                                                                                                                                                    explorer.exe
                                                                                                                                                                    1⤵
                                                                                                                                                                      PID:3684
                                                                                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                                      1⤵
                                                                                                                                                                        PID:2220

                                                                                                                                                                      Network

                                                                                                                                                                      MITRE ATT&CK Enterprise v15

                                                                                                                                                                      Replay Monitor

                                                                                                                                                                      Loading Replay Monitor...

                                                                                                                                                                      Downloads

                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Microsoft\Windows\3082\StructuredQuerySchema.bin
                                                                                                                                                                        Filesize

                                                                                                                                                                        438KB

                                                                                                                                                                        MD5

                                                                                                                                                                        29e3ce4ec00c87f1b968a92bfdb567b1

                                                                                                                                                                        SHA1

                                                                                                                                                                        33de600710bfb563efc525c9ee9985b191b09565

                                                                                                                                                                        SHA256

                                                                                                                                                                        7c3502b5139eaaa0d67b14d80340f585228fdf56db7064c672a2a3483d9ce96e

                                                                                                                                                                        SHA512

                                                                                                                                                                        95827b9c1276d94c74a7c10ab27d97179f3aca53e1c737c32b5e96c14dc418bf7de5c4b7a5148a3f9f7d73dd838c9e669730321f547515c9dec275820869f04c

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\JFPDEE2G\microsoft.windows[1].xml
                                                                                                                                                                        Filesize

                                                                                                                                                                        97B

                                                                                                                                                                        MD5

                                                                                                                                                                        811db6e0e625e8dbd8d39cf7a589dbdf

                                                                                                                                                                        SHA1

                                                                                                                                                                        b1277886d693e1030b5a9b35816202e3885d8625

                                                                                                                                                                        SHA256

                                                                                                                                                                        918605413e82415568765658ea4f6c41711afc306140ecc8753b198f7be1c546

                                                                                                                                                                        SHA512

                                                                                                                                                                        3270f15f17923de039548950a069d13b5fe142891587a57d2783cd6d6d5ba7c1935bcac0921e734b024341ffc61dca033991186fcc6d8c651425d02ec229b8a0

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_cpitacg1.q40.ps1
                                                                                                                                                                        Filesize

                                                                                                                                                                        60B

                                                                                                                                                                        MD5

                                                                                                                                                                        d17fe0a3f47be24a6453e9ef58c94641

                                                                                                                                                                        SHA1

                                                                                                                                                                        6ab83620379fc69f80c0242105ddffd7d98d5d9d

                                                                                                                                                                        SHA256

                                                                                                                                                                        96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

                                                                                                                                                                        SHA512

                                                                                                                                                                        5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\acpi.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        10KB

                                                                                                                                                                        MD5

                                                                                                                                                                        889f56efa0c191c12dd5b74db16a5ba2

                                                                                                                                                                        SHA1

                                                                                                                                                                        7b8bfca2ffec880a0422a9aeab6178dad99f40bc

                                                                                                                                                                        SHA256

                                                                                                                                                                        3451dbd195675cf87c64dd16c4b4ae92362598e5ced58b615942862acbc13d07

                                                                                                                                                                        SHA512

                                                                                                                                                                        e5ab054341cbda0794628d61377b033c28ac014b5035e88d5accaefb315eb89d0c2ab82601f89f3eefbad79dd96bc5df5989d88effdd0dd40d89d40f169eefc5

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\cdrom.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        11KB

                                                                                                                                                                        MD5

                                                                                                                                                                        fc650fcd2a96576764d96496f4590858

                                                                                                                                                                        SHA1

                                                                                                                                                                        5ad3e53dfbcff0e6a52c3dce597b529a5d893449

                                                                                                                                                                        SHA256

                                                                                                                                                                        6ae962e02d628148efc82295d75ad7cbebc0675a6051c30f648a1504450fd4c4

                                                                                                                                                                        SHA512

                                                                                                                                                                        e6b97df1ec154d204bcd7f8509ab9bca4c5db11799ba28d1334c8894cbaaba251af00f3743e53b5c7a07078858bd738201c41bcffde3b692ebe1d5759fe29985

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\compositebus.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        7KB

                                                                                                                                                                        MD5

                                                                                                                                                                        b7b61153b37276cc3a5c87fb4f050d9e

                                                                                                                                                                        SHA1

                                                                                                                                                                        7dcf145bcf37b719c4291d52f01a5942bd9b8fc6

                                                                                                                                                                        SHA256

                                                                                                                                                                        8c610edfe613226714ceb7dd8461131cb3dabc3d5afb6927b5ed0f621da0b8ec

                                                                                                                                                                        SHA512

                                                                                                                                                                        b6803af350be29b77c821c42108d1e115b7a0b162b2af7ef7bb1a77d8b16f606aee391274226b25eed65931a5e9742a61504adfa2f50b384c689dfa7d6e5643c

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\hdaudbus.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        10KB

                                                                                                                                                                        MD5

                                                                                                                                                                        7def0fd40493a26bb3b8cfa44c9ab3a4

                                                                                                                                                                        SHA1

                                                                                                                                                                        bbe84fba968fe86f69d0461fd5df6fb9af3ba4c4

                                                                                                                                                                        SHA256

                                                                                                                                                                        fa499b3f209faa3a556f87467ea4dbe9b1fdc9249f12e2317189f05deb4e5b3e

                                                                                                                                                                        SHA512

                                                                                                                                                                        533aa379b5cb1f1062e01613e7dd8bac78f679d92f5586c8819028edd9e5ce99539638af1b63328854521dd2664e5c83fb3d8bf8795ed40ff25acb6bccc01d36

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\hdaudio.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        102KB

                                                                                                                                                                        MD5

                                                                                                                                                                        1e23103dce71a9f844edb07841dfe01d

                                                                                                                                                                        SHA1

                                                                                                                                                                        168e781bf910cd233c3f8e65a78d553fa83caa6c

                                                                                                                                                                        SHA256

                                                                                                                                                                        de4857e2fc1eff45167d26416be67d48e47bcdfbaa7bb5bf8252b1428f988545

                                                                                                                                                                        SHA512

                                                                                                                                                                        5b93faddff944a8f4c539cda3342ff1c3cae91565ccfc8186486c1cc9ece6ec65f41d8d8194d531b58dc8373dec7d140ce11d31d717979efec06ea27db39a332

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\input.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        149KB

                                                                                                                                                                        MD5

                                                                                                                                                                        506dd41597377352b3bf057846d1c761

                                                                                                                                                                        SHA1

                                                                                                                                                                        a95982136d4a0c533c3b54aafbd4ee32a0fa3daf

                                                                                                                                                                        SHA256

                                                                                                                                                                        f0f6e7644a100d664fb8f02d5e33b94b94be172f7f8e56dfceeded2c8af9c2a5

                                                                                                                                                                        SHA512

                                                                                                                                                                        2e813f982776dec97bdd07b5c3ab0df67187956a86bdd7c6733873682de1d1935ab50861f5439a95001de3a67e3f64f51c5d1bfaef6de1012b5b253e8a832263

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\keyboard.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        117KB

                                                                                                                                                                        MD5

                                                                                                                                                                        c5ce46dbe89fdea4a95a03104c4b0f6e

                                                                                                                                                                        SHA1

                                                                                                                                                                        d276757243c8cf3bbd1b0f781865d18a2c5734a0

                                                                                                                                                                        SHA256

                                                                                                                                                                        e53152f34306d3ea95cff3b65784d53ca557ddef0f20314bb081c2232308bef1

                                                                                                                                                                        SHA512

                                                                                                                                                                        6a452af59aaed9ee2d13fa39b48cd2f493d6da4ffdf8d6cacc7a35b3f03746e737da4bdccb41a39a757687e726382a1495daaf424e38942197d25fe4de80b9eb

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\monitor.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        1.1MB

                                                                                                                                                                        MD5

                                                                                                                                                                        bba59b078b1582fc2ce358f4725daab0

                                                                                                                                                                        SHA1

                                                                                                                                                                        13b7c9534cc8a477cd13937cd238d505571b948b

                                                                                                                                                                        SHA256

                                                                                                                                                                        8d6f84bcdaa6467f6e027f1438ca34f26b03abde616d09a090ae73fa216427f1

                                                                                                                                                                        SHA512

                                                                                                                                                                        6cdeea4996dd7a82f06972f6ef8ce42631bb3e4b7a173fdc8c3e3fc69e5f6e311f18b5b9a7d0a61fbb09e43b44c615af92237311f5f2993c547bd1b5e596f2d4

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\mshdc.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        69KB

                                                                                                                                                                        MD5

                                                                                                                                                                        d5deedece6b78a6459b4d5910e28bf71

                                                                                                                                                                        SHA1

                                                                                                                                                                        c18113f98da2fc679bc8d520c4a12c1bdbc0401a

                                                                                                                                                                        SHA256

                                                                                                                                                                        4a806d8d052b6ad95a3d9938edc7bc3bce87374e952414f2e302dcfd9492461c

                                                                                                                                                                        SHA512

                                                                                                                                                                        407a7e7d797645add1a7ecb06a686800d4b90cbc830a24d59bcfdd6b4211e3cc8cf9d061b2fb6268fd65c4774e27b039498c4316defb64bb5b4c7157a449f2cc

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\msmouse.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        94KB

                                                                                                                                                                        MD5

                                                                                                                                                                        30b0d2fc9846410f6d4ce1700abb9291

                                                                                                                                                                        SHA1

                                                                                                                                                                        1c65de84f0953a8bfab79bb20bca8c7ae3fd4844

                                                                                                                                                                        SHA256

                                                                                                                                                                        e5e64e5ea9e17e8dc1c5d3e44bc1a7fd6f4bb9d6fe18a6f5e2bbf725452a0608

                                                                                                                                                                        SHA512

                                                                                                                                                                        e65ced53fb2d7e9e9de0087987f095372a04084038b9bfe93e3fb35b438111fef07a29b0fb9e076208360981234be02b002f042b71cfd2faa7e554b1afa1cfe2

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\mssmbios.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        7KB

                                                                                                                                                                        MD5

                                                                                                                                                                        5261a9b89d46a4fef67339ecceb960be

                                                                                                                                                                        SHA1

                                                                                                                                                                        d28b4fe73b9e2b4081515b82f228d59f4d2d3540

                                                                                                                                                                        SHA256

                                                                                                                                                                        d017b05abae299a8e39605851028cc956b08fe42351e8f7dc587bd5cb569fb62

                                                                                                                                                                        SHA512

                                                                                                                                                                        d84acb2b271bde8f5aefc61b7f073a834c208132ae1f1f5269a3a5478f498734956bdc4c252f0841a0452a3808d5e9570f75e6cd23bb45fa35d6f597e46e3a0f

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\pci.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        21KB

                                                                                                                                                                        MD5

                                                                                                                                                                        7276679f314f1b8e7dc744732815b905

                                                                                                                                                                        SHA1

                                                                                                                                                                        d03a448ee9da74c9ab574eefe1a96de7df5fb7f0

                                                                                                                                                                        SHA256

                                                                                                                                                                        bf814458287c3c1fefb8c690d55e3bc1f7d09c669ba62fc691d4984eb751e251

                                                                                                                                                                        SHA512

                                                                                                                                                                        235d13697c93dc76cdbd81529484c072b39fb6fbfe4a6e620a7ff90657096e0d6638a4840a026cc75291b44cdfcab7645244288b609b095765e33243967b0bf9

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\rdpbus.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        7KB

                                                                                                                                                                        MD5

                                                                                                                                                                        89003643b82ed73d572af5a29b2a100d

                                                                                                                                                                        SHA1

                                                                                                                                                                        f71529941d38840b38d344792772d87b12c122d8

                                                                                                                                                                        SHA256

                                                                                                                                                                        f22a95fe2376898c748ff88ca9f5514fb4b24c74acf56ff9b4d648ee79752308

                                                                                                                                                                        SHA512

                                                                                                                                                                        09ef3509580fc83a1d60a7dfb50d3fe148c60e1acd9fa15a13924f3da1d208e150a45d37af2bef5fcf1edeabc0ff9a50e2f02dc52e12663a71794d64d6d443a2

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\spaceport.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        7KB

                                                                                                                                                                        MD5

                                                                                                                                                                        7c98532d60471896d23798fe01281c7d

                                                                                                                                                                        SHA1

                                                                                                                                                                        e23bae6c25ec4063656ea67692868e5007136cf2

                                                                                                                                                                        SHA256

                                                                                                                                                                        2d5804567767dced765cc2420a2ccfc3f53ea27da4add72557086cfc40794ec1

                                                                                                                                                                        SHA512

                                                                                                                                                                        4b43319b866f833106dbef0418ae53fbbd5ffb8bdc07331466523ad37bc7e963dec2425ef8e2fd2190c5ff090f78fae66f405ea4e8a494d66fddd2bdb2da278f

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\swenum.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        7KB

                                                                                                                                                                        MD5

                                                                                                                                                                        7becd17ec5034fd7750aba227aa6ce81

                                                                                                                                                                        SHA1

                                                                                                                                                                        0cdcdb826a2cd7c54aa90d0d792b1e57ab8d4a89

                                                                                                                                                                        SHA256

                                                                                                                                                                        582b103a375d4dae408b8522b67d40106e661dce7056e50605db879f6aa25255

                                                                                                                                                                        SHA512

                                                                                                                                                                        14d67afaa5795399e4f8800a1bcab3f032b706360f22b3954a9cd5fb4414e8ea54db6d7a4eb7a86ef83a2c68f3d41d4152d190c08f83fb0db2910e9dfaa50890

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\umbus.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        9KB

                                                                                                                                                                        MD5

                                                                                                                                                                        217526c5fad7db1781459e05529ce62c

                                                                                                                                                                        SHA1

                                                                                                                                                                        3f64845cebc48117984ccd873e9801757e128ecf

                                                                                                                                                                        SHA256

                                                                                                                                                                        f41e97ddc2bf9ef38340632125270ebcc93cdcc1c60247f93cb9761d4ff6b221

                                                                                                                                                                        SHA512

                                                                                                                                                                        b0b18a89d922429c6bee5f2624af58fda46991f140a04139f46f8171d59877e3c562768f1f61a39424c8a9b6b7737bb01d5bac856297898634526fcbbb43fc8a

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\usbport.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        153KB

                                                                                                                                                                        MD5

                                                                                                                                                                        cbd11f19b25edcb30670048874285ff2

                                                                                                                                                                        SHA1

                                                                                                                                                                        50f85e49d9e6281b84061fca4c9fe263c417f801

                                                                                                                                                                        SHA256

                                                                                                                                                                        41cf5f72ded104e9db21c1dca285054de7c3749b76f0ef4f41373aa7460b1d9c

                                                                                                                                                                        SHA512

                                                                                                                                                                        1eb487a516edad3211b16b5d71492b12dfd94f59548b4a8fb0bb5208a6847bf23e004e4701842307d2d6d4c833cb213424d4f28c287214ba063607b26436f814

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\vdrvroot.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        8KB

                                                                                                                                                                        MD5

                                                                                                                                                                        27f20e72630fa9c3ec629b3d67577aa3

                                                                                                                                                                        SHA1

                                                                                                                                                                        8ff84dcd164b8ee70912074ae4326d7b0f0623ea

                                                                                                                                                                        SHA256

                                                                                                                                                                        5d8e04c35d5d9e377eca2b490065b2a6b4d3cea08edee1894d13d31fa04090ea

                                                                                                                                                                        SHA512

                                                                                                                                                                        5c4fdb74e74b2ad4f69e13247f11f70e7f667aed94f1fff795d3e7c8ca9d763d8d98442282f1869d11dd09e0b08a186325c54e1877d914452dc3cd38839e9049

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\vhdmp.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        7KB

                                                                                                                                                                        MD5

                                                                                                                                                                        ab05012a50929b3688e9f0f167ad316a

                                                                                                                                                                        SHA1

                                                                                                                                                                        0d77501f8e004faa5bfaaa9ada051b0008bea11b

                                                                                                                                                                        SHA256

                                                                                                                                                                        4651237f1fd6266407bbbca2c16044bebb8c8ccd749c23fb606f348be9b9ca76

                                                                                                                                                                        SHA512

                                                                                                                                                                        63852abfd7765ff9b8939dc1cc74d3af5e28e011b2808fa54bc497c5fe24e80f46ae9f6ee8d1664ee344c7d19fee62a2917d48f547d7870d79448cfcce8f8d83

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\volmgr.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        8KB

                                                                                                                                                                        MD5

                                                                                                                                                                        9e5434b710eac3d8693c83a289d09140

                                                                                                                                                                        SHA1

                                                                                                                                                                        c77722fb4d3f27ed1fd1ab6d0fcc6770ac151dad

                                                                                                                                                                        SHA256

                                                                                                                                                                        62e799ff70aad56f76611e3fd5f1392bfc1bb07ecdf6b2beecefde9bd98cfdf2

                                                                                                                                                                        SHA512

                                                                                                                                                                        7cf4774a14792a60f7b03636d2003532cfe7df7806060546de6f9ec3984df5d555de4a84c392beb344d546af5d0ba2bea3f89305103cde7645b43c04e9679087

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • C:\Windows\INF\volume.PNF
                                                                                                                                                                        Filesize

                                                                                                                                                                        5KB

                                                                                                                                                                        MD5

                                                                                                                                                                        63109d909af7f6f641d98f7eff86e4c6

                                                                                                                                                                        SHA1

                                                                                                                                                                        e681fb77d462f686b5a3eda857dea3245d484f36

                                                                                                                                                                        SHA256

                                                                                                                                                                        e84d6136088254a43c9232cf8acd77f293cc9f5d2c53bce40046f7071bca3abb

                                                                                                                                                                        SHA512

                                                                                                                                                                        edd99aae1d89c748d1cb7cd6b2e17b1e5f7f5d3e779cedba004871f9395f62860efa5335da21d29f54aca52b41206280548cf31e65991227fc1897cb36011a02

                                                                                                                                                                        Download Submit

                                                                                                                                                                      • memory/476-208-0x0000018D07F40000-0x0000018D07F60000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/476-217-0x0000018D07F20000-0x0000018D07F40000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/476-231-0x0000018D1B510000-0x0000018D1B610000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/476-193-0x0000018D07F00000-0x0000018D07F20000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/1384-694-0x00000000036C0000-0x00000000036C1000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        4KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/1624-901-0x0000000004150000-0x0000000004151000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        4KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/1732-607-0x0000017D97A00000-0x0000017D97A20000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/1732-640-0x0000017DA9DF0000-0x0000017DA9EF0000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/1732-626-0x0000017D97A20000-0x0000017D97A40000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/1732-623-0x0000017D97A40000-0x0000017D97A60000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/2052-389-0x0000028D60A00000-0x0000028D60B00000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/2052-436-0x0000028D755F0000-0x0000028D756F0000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/2052-402-0x0000028D62320000-0x0000028D62340000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/2052-416-0x0000028D62360000-0x0000028D62380000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/2052-420-0x0000028D62340000-0x0000028D62360000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/2052-394-0x0000028D62200000-0x0000028D62300000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/2052-388-0x0000028D60A00000-0x0000028D60B00000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/2304-76-0x0000000004BC0000-0x0000000004BC1000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        4KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/2724-526-0x000002AE037C0000-0x000002AE037E0000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/2724-493-0x000002AE01B00000-0x000002AE01C00000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/2724-540-0x000002AE176B0000-0x000002AE177B0000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/2724-524-0x000002AE037A0000-0x000002AE037C0000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/2724-525-0x000002AE037E0000-0x000002AE03800000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/2924-905-0x000001FEF3B90000-0x000001FEF3C90000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/2924-903-0x000001FEF3B90000-0x000001FEF3C90000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-730-0x000001D000D80000-0x000001D000DA0000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-723-0x000001D001030000-0x000001D001050000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-23-0x00007FFD6AE10000-0x00007FFD6B8D2000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        10.8MB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-1-0x000002A4296B0000-0x000002A429732000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        520KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-744-0x000001D014360000-0x000001D014460000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-24-0x00007FFD6AE10000-0x00007FFD6B8D2000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        10.8MB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-709-0x000001D000D60000-0x000001D000D80000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-697-0x000001D07E7C0000-0x000001D07E8C0000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-696-0x000001D07E7C0000-0x000001D07E8C0000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-12-0x000002A40ED90000-0x000002A40EDA0000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        64KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-11-0x000002A4272C0000-0x000002A4272E2000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        136KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-22-0x000002A429690000-0x000002A4296AE000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        120KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-21-0x000002A429620000-0x000002A429628000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        32KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-20-0x000002A429640000-0x000002A429654000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        80KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-19-0x000002A429670000-0x000002A429694000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        144KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-18-0x000002A429670000-0x000002A42969A000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        168KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-17-0x00007FFD6AE10000-0x00007FFD6B8D2000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        10.8MB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-16-0x00007FFD6AE10000-0x00007FFD6B8D2000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        10.8MB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-14-0x000002A429B50000-0x000002A429C52000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1.0MB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-25-0x00007FFD6AE10000-0x00007FFD6B8D2000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        10.8MB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-0-0x00007FFD6AE13000-0x00007FFD6AE15000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        8KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-13-0x00007FFD6AE10000-0x00007FFD6B8D2000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        10.8MB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3108-15-0x00007FFD6AE10000-0x00007FFD6B8D2000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        10.8MB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3324-490-0x0000000004710000-0x0000000004711000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        4KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3532-386-0x00000000020F0000-0x00000000020F1000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        4KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3684-799-0x0000020849400000-0x0000020849500000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3684-800-0x0000020849400000-0x0000020849500000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3684-847-0x000002085E1F0000-0x000002085E2F0000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3684-833-0x000002084AB40000-0x000002084AB60000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3684-832-0x000002084AFE0000-0x000002084B000000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3684-815-0x000002084AB20000-0x000002084AB40000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3920-318-0x000001C475240000-0x000001C475260000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3920-291-0x000001C475090000-0x000001C475190000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3920-285-0x000001BC72900000-0x000001BC72A00000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3920-319-0x000001C475220000-0x000001C475240000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3920-333-0x000001C478720000-0x000001C478820000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/3920-294-0x000001C475200000-0x000001C475220000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/4008-108-0x00000233416B0000-0x00000233416D0000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/4008-110-0x00000233416F0000-0x0000023341710000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/4008-111-0x00000233416D0000-0x00000233416F0000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        128KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/4008-78-0x000002333FF00000-0x0000023340000000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/4008-125-0x0000023353AD0000-0x0000023353BD0000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        1024KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/4100-591-0x00000000041E0000-0x00000000041E1000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        4KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/4104-283-0x0000000003840000-0x0000000003841000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        4KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/4204-797-0x0000000002D40000-0x0000000002D41000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        4KB

                                                                                                                                                                        Download

                                                                                                                                                                      • memory/4584-181-0x0000000003280000-0x0000000003281000-memory.dmp

                                                                                                                                                                        Filesize

                                                                                                                                                                        4KB

                                                                                                                                                                        Download