| Source: PaintStudio.View.exe, 00000014.00000002.1955493986.000002148AB46000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: http://json-schema.org/draft-04/schema |
| Source: PaintStudio.View.exe, 0000000F.00000002.1661069213.0000021881114000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: http://ns.a.0 |
| Source: PaintStudio.View.exe, 00000014.00000002.2008287654.000002148D711000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: http://ns.a.0(D |
| Source: PaintStudio.View.exe, 0000000F.00000002.1661069213.0000021881114000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2008287654.000002148D711000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: http://ns.adobe.ho |
| Source: PaintStudio.View.exe, 00000014.00000002.2063637961.0000021493525000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.1981844287.000002148C800000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2009517742.000002148D79D000.00000004.00000020.00020000.00000000.sdmp, settings.dat.15.dr, settings.dat.LOG1.15.dr | String found in binary or memory: https://aka.ms/paint3dhelp |
| Source: PaintStudio.View.exe, 00000014.00000002.2038618715.000002148E38C000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://aka.ms/paint3dhelpHD |
| Source: PaintStudio.View.exe, 00000014.00000002.2009517742.000002148D79D000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2045631763.000002148E600000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://api.remix3d.com/ |
| Source: PaintStudio.View.exe, 00000014.00000002.2009517742.000002148D79D000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://api.remix3d.com/v3/creations |
| Source: PaintStudio.View.exe, 00000014.00000002.2009517742.000002148D79D000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://api.remix3d.com/v3/creations/ |
| Source: PaintStudio.View.exe, 0000000F.00000002.1681026219.0000021881F7E000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2044751625.000002148E55D000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://api.remix3d.com/v3/creationse |
| Source: PaintStudio.View.exe, 0000000F.00000002.1677469961.0000021881DC3000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://evoke-windowsservices-tas.msedge.net/ |
| Source: PaintStudio.View.exe, 0000000F.00000002.1621417542.0000021806619000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 0000000F.00000002.1677469961.0000021881DC3000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.1951722900.000002148AA1D000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://evoke-windowsservices-tas.msedge.net/ab |
| Source: PaintStudio.View.exe, 0000000F.00000002.1677469961.0000021881DC3000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://evoke-windowsservices-tas.msedge.net/abhttps://evoke-windowsservices-tas.msedge.net/ab |
| Source: PaintStudio.View.exe, 0000000F.00000002.1677469961.0000021881DC3000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://evoke-windowsservices-tas.msedge.net/abx |
| Source: PaintStudio.View.exe, 00000014.00000002.1941477317.0000021483807000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://hubble-int.azurewebsites.net |
| Source: PaintStudio.View.exe, 00000014.00000002.1941477317.0000021483807000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://hubble-test.azurewebsites.net |
| Source: PaintStudio.View.exe, 00000014.00000002.1941477317.0000021483807000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://hubble.edog.officeapps.live.com |
| Source: PaintStudio.View.exe, 00000014.00000002.1941477317.0000021483807000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://hubble.officeapps.live-int.com |
| Source: PaintStudio.View.exe, 00000014.00000002.1941477317.0000021483807000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://hubble.officeapps.live.com |
| Source: PaintStudio.View.exe, 0000000F.00000002.1648196700.0000021880178000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 0000000F.00000003.1553199812.00000218808A8000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 0000000F.00000003.1555352027.00000218808AA000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 0000000F.00000003.1559076087.00000218808AA000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.1994354792.000002148CE00000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.1986380329.000002148C94E000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://hubble.officeapps.live.com/mediasvc/api/media/ |
| Source: PaintStudio.View.exe, 00000014.00000002.1941477317.0000021483807000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://hubblecontent.osi.office-int.net |
| Source: PaintStudio.View.exe, 00000014.00000002.1941477317.0000021483807000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://hubblecontent.osi.office.net |
| Source: PaintStudio.View.exe, 0000000F.00000002.1648196700.0000021880178000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.1986380329.000002148C94E000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/ |
| Source: PaintStudio.View.exe, 0000000F.00000002.1648712362.00000218801C9000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.1989068563.000002148CB00000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/;Media=https://hubble.officeapps.live.com/medias |
| Source: PaintStudio.View.exe, 00000014.00000002.1994354792.000002148CE00000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/e |
| Source: PaintStudio.View.exe, 0000000F.00000003.1553199812.00000218808A8000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 0000000F.00000003.1555352027.00000218808AA000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 0000000F.00000003.1559076087.00000218808AA000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/we |
| Source: PaintStudio.View.exe, 00000014.00000002.1941477317.0000021483807000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://hubblecontent.osi.officeppe.netRESP |
| Source: PaintStudio.View.exe, 0000000F.00000002.1624292159.000002180687C000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.1960621724.000002148AC8A000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://login.live.com |
| Source: PaintStudio.View.exe, 00000014.00000002.1957656890.000002148ABD0000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://login.windows.local |
| Source: PaintStudio.View.exe, 0000000F.00000002.1623706663.000002180681E000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://login.windows.local1003 |
| Source: PaintStudio.View.exe, 0000000F.00000002.1643602496.000002187F5F3000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.1947021882.00000214839E3000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://www.preview.r |
| Source: PaintStudio.View.exe, 0000000F.00000002.1681780653.000002188207A000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 0000000F.00000002.1643602496.000002187F5F3000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 0000000F.00000003.1549169113.0000021886EE7000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2046158991.000002148E634000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2047305957.000002148E68B000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2009517742.000002148D79D000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://www.preview.remix3d.com |
| Source: PaintStudio.View.exe, 0000000F.00000002.1643602496.000002187F5F3000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 0000000F.00000003.1549169113.0000021886EE7000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2046158991.000002148E634000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2047305957.000002148E68B000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://www.preview.remix3d.com/ |
| Source: PaintStudio.View.exe, 0000000F.00000002.1643602496.000002187F5F3000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 0000000F.00000003.1549169113.0000021886EE7000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2046158991.000002148E634000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2047305957.000002148E68B000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.1947021882.00000214839E3000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://www.preview.remix3d.com/blends/profile |
| Source: PaintStudio.View.exe, 0000000F.00000002.1681780653.000002188207A000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 0000000F.00000003.1549169113.0000021886EE7000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2046158991.000002148E634000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2047305957.000002148E68B000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2009517742.000002148D79D000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://www.preview.remix3d.com/details/ |
| Source: PaintStudio.View.exe, 0000000F.00000002.1681780653.000002188207A000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 0000000F.00000002.1681574609.0000021882061000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 0000000F.00000003.1549169113.0000021886EE7000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2046158991.000002148E634000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2047305957.000002148E68B000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.1989967520.000002148CBBC000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2009517742.000002148D79D000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://www.remix3d.com |
| Source: PaintStudio.View.exe, 0000000F.00000002.1681780653.000002188207A000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 0000000F.00000002.1681998812.000002188209B000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 0000000F.00000002.1676704850.0000021881D5D000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 0000000F.00000003.1549169113.0000021886EE7000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2046158991.000002148E634000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2047305957.000002148E68B000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2009517742.000002148D79D000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2045631763.000002148E600000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.1965287440.000002148AF34000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://www.remix3d.com/ |
| Source: PaintStudio.View.exe, 0000000F.00000002.1681998812.000002188209B000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.1965287440.000002148AF34000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://www.remix3d.com/_SSL |
| Source: PaintStudio.View.exe, 0000000F.00000002.1681780653.000002188207A000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 0000000F.00000002.1647523963.0000021880113000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 0000000F.00000002.1660253380.000002188108D000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 0000000F.00000003.1549169113.0000021886EE7000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2046158991.000002148E634000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2047305957.000002148E68B000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2009517742.000002148D79D000.00000004.00000020.00020000.00000000.sdmp, PaintStudio.View.exe, 00000014.00000002.2045631763.000002148E600000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://www.remix3d.com/blends/profile |
| Source: PaintStudio.View.exe, 00000014.00000002.2009517742.000002148D79D000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://www.remix3d.com/details/ |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: telemetryuwp.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: vccorlib140_app.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: msvcp140_app.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: vcruntime140_app.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: sharedmemoryuwp.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: kernel.appcore.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: wintypes.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: execmodelclient.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: propsys.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: coremessaging.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: twinapi.appcore.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.shell.servicehostbuilder.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: execmodelproxy.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: onecoreuapcommonproxystub.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.ui.xaml.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: bcp47langs.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: iertutil.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: dcomp.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.ui.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windowmanagementapi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: textinputframework.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: inputhost.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: coreuicomponents.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: coreuicomponents.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: ntmarta.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: uxtheme.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: urlmon.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: srvcli.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: netutils.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: dxgi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: resourcepolicyclient.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: d3d11.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.staterepositorycore.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: d3d10warp.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: dxcore.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.system.profile.retailinfo.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: d2d1.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.applicationmodel.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: dwrite.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: textshaping.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.storage.applicationdata.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: logoncli.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: rometadata.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: mrmcorer.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.staterepositoryclient.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: profapi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: bcp47mrm.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.globalization.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: xmllite.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: vcruntime140_1_app.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.ui.xaml.controls.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: rmclient.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: uiamanager.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.ui.core.textinput.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.ui.immersive.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: dataexchange.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: cryptbase.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.web.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: concrt140_app.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: cabinet.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windowscodecs.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.applicationmodel.datatransfer.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.storage.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: wldp.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.networking.connectivity.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.accountscontrol.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.devices.enumeration.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: devdispitemprovider.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.energy.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.graphics.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: directmanipulation.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: twinapi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: userenv.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: profext.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.web.http.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: wininet.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: sspicli.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: ondemandconnroutehelper.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: winhttp.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: mswsock.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: firewallapi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: dnsapi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: iphlpapi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: fwbase.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: winnsi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: mfplat.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: rtworkq.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: rasadhlp.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.system.profile.platformdiagnosticsandusagedatasettings.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: policymanager.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: msvcp110_win.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: threadpoolwinrt.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: msxml6.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: wpnapps.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: msftedit.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: fwpuclnt.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: globinputhost.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: schannel.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.ui.xaml.phone.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: mskeyprotect.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: ntasn1.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: ncrypt.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: ncryptsslp.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: msasn1.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: dpapi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: cryptsp.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: rsaenh.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: gpapi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: certenroll.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: certca.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: dsparse.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: ninput.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: efswrt.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: mpr.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: dwmapi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: mlang.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: wuceffects.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: edputil.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.system.profile.systemid.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: clipc.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: cryptowinrt.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.system.userprofile.diagnosticssettings.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: onecorecommonproxystub.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: telemetryuwp.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: vccorlib140_app.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: msvcp140_app.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: vcruntime140_app.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: sharedmemoryuwp.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: vcruntime140_app.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: msvcp140_app.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: msvcp140_app.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: kernel.appcore.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: wintypes.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: execmodelclient.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: propsys.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: coremessaging.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: twinapi.appcore.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.shell.servicehostbuilder.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: execmodelproxy.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: onecoreuapcommonproxystub.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.ui.xaml.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: bcp47langs.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: iertutil.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: dcomp.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.ui.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windowmanagementapi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: textinputframework.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: inputhost.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: coreuicomponents.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: coreuicomponents.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: ntmarta.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: uxtheme.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: urlmon.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: srvcli.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: netutils.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: dxgi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: resourcepolicyclient.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: d3d11.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.staterepositorycore.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: d3d10warp.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: dxcore.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.system.profile.retailinfo.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.applicationmodel.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: d2d1.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: dwrite.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: textshaping.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.storage.applicationdata.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: rometadata.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: mrmcorer.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.staterepositoryclient.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: profapi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: bcp47mrm.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.globalization.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: xmllite.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: vcruntime140_1_app.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.ui.xaml.controls.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: rmclient.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: uiamanager.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.ui.core.textinput.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.ui.immersive.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: dataexchange.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: cryptbase.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.web.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: logoncli.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: concrt140_app.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: cabinet.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windowscodecs.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.applicationmodel.datatransfer.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.storage.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.storage.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.storage.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: wldp.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.networking.connectivity.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.accountscontrol.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.devices.enumeration.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: devdispitemprovider.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.energy.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.graphics.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: directmanipulation.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: twinapi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: userenv.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: profext.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: efswrt.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: mpr.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.web.http.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: wininet.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: sspicli.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: ondemandconnroutehelper.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: winhttp.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: mswsock.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: firewallapi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: dnsapi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: iphlpapi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: fwbase.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: winnsi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: dpapi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: msasn1.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: cryptsp.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: rsaenh.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: gpapi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: mfplat.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: rtworkq.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.system.profile.platformdiagnosticsandusagedatasettings.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: policymanager.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: msvcp110_win.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: rasadhlp.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: threadpoolwinrt.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: msxml6.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: wpnapps.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: msftedit.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: fwpuclnt.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: globinputhost.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: schannel.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.ui.xaml.phone.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: ninput.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: dwmapi.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: mskeyprotect.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: ntasn1.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: ncrypt.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: ncryptsslp.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: certenroll.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: certca.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: dsparse.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: mlang.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.system.profile.systemid.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: clipc.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: cryptowinrt.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: windows.system.userprofile.diagnosticssettings.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: onecorecommonproxystub.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: wuceffects.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Section loaded: edputil.dll | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Textures VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Windows\Fonts\segoeuil.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Fonts\PaintA.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Fonts\PaintA.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Fonts\PaintA.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Fonts\PaintA.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Fonts\PaintA.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Fonts\BhaiMDL2.2.52.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Fonts\BhaiMDL2.2.52.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Fonts\BhaiMDL2.2.52.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Fonts\BhaiMDL2.2.52.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Fonts\BhaiMDL2.2.52.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\cloudCommunitySettings.json VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\Projects.json VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder\EngineConfigId.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder\SceneData.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder\Canvas_0.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder\Canvas_1.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder\Canvas_2.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder\Canvas_3.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder\Canvas_4.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder\Canvas_5.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder\Canvas_6.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder\Canvas_8.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder\Canvas_7.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Textures VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Windows\Fonts\segoeuil.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Fonts\PaintA.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Fonts\PaintA.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Fonts\PaintA.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Fonts\PaintA.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Fonts\PaintA.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Fonts\BhaiMDL2.2.52.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Fonts\BhaiMDL2.2.52.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Fonts\BhaiMDL2.2.52.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Fonts\BhaiMDL2.2.52.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Fonts\BhaiMDL2.2.52.ttf VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder (2)\SceneData.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder (2)\EngineConfigId.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder (2)\Canvas_0.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder (2)\Canvas_1.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder (2)\Canvas_2.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder (2)\Canvas_3.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder (2)\Canvas_4.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder (2)\Canvas_5.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder (2)\Canvas_6.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder (2)\Canvas_7.bin VolumeInformation | Jump to behavior |
| Source: C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe | Queries volume information: C:\Users\user\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\LocalState\Projects\WorkingFolder (2)\Canvas_8.bin VolumeInformation | Jump to behavior |
Edit tour
chrome.exe (PID: 1276 cmdline: 
rundll32.exe (PID: 7472 cmdline: 
PaintStudio.View.exe (PID: 7816 cmdline: 
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node