Source: | Binary string: %costura.common.logging.pdb.compressed source: Move Mouse.exe, 00000000.00000002.2234625972.0000020B80001000.00000004.00000800.00020000.00000000.sdmp |
Source: | Binary string: serilog=costura.serilog.dll.compressed%serilog.sinks.fileScostura.serilog.sinks.file.dll.compressedScostura.serilog.sinks.file.pdb.compressedCsv.xceed.wpf.avalondock.resourcesqcostura.sv.xceed.wpf.avalondock.resources.dll.compressed source: Move Mouse.exe |
Source: | Binary string: d:\ExprUpdate2\Blend\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\Microsoft.Expression.Drawing\Microsoft.Expression.Drawing.pdb source: Move Mouse.exe, 00000000.00000002.2253682378.0000020BEE9D0000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: costura.costura.pdb.compressed source: Move Mouse.exe |
Source: | Binary string: *costura.common.logging.core.pdb.compressed source: Move Mouse.exe, 00000000.00000002.2234625972.0000020B80001000.00000004.00000800.00020000.00000000.sdmp |
Source: | Binary string: C:\Users\Eric\Source\Repos\ejensen\toggle-switch-control\WPF\ToggleSwitch\obj\Release\net46\ToggleSwitch.pdb source: Move Mouse.exe, 00000000.00000002.2250632311.0000020BEC540000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: /_/src/Serilog/obj/Release/net47/Serilog.pdbSHA256 source: Move Mouse.exe, 00000000.00000002.2250843544.0000020BEC630000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: F:\Work\GitHub\AudioSwitcher\AudioSwitcher.AudioApi (NET45)\obj\Release\AudioSwitcher.AudioApi.pdb source: Move Mouse.exe, 00000000.00000002.2257235847.0000020BEEF70000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: common.loggingKcostura.common.logging.dll.compressedKcostura.common.logging.pdb.compressed source: Move Mouse.exe |
Source: | Binary string: costura.serilog.sinks.file.pdb.compressed source: Move Mouse.exe |
Source: | Binary string: F:\Work\GitHub\AudioSwitcher\AudioSwitcher.AudioApi.CoreAudio (NET45)\obj\Release\AudioSwitcher.AudioApi.CoreAudio.pdb source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2257363813.0000020BEEF90000.00000004.08000000.00040000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2245696411.0000020B90366000.00000004.00000800.00020000.00000000.sdmp |
Source: | Binary string: costura.common.logging.core.pdb.compressed source: Move Mouse.exe |
Source: | Binary string: /_/src/Quartz/obj/Release/net472/Quartz.pdb source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2264772996.0000020BF4960000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: costura.common.logging.pdb.compressed|||Common.Logging.pdb|AB2E6312E4022E4DD37202422881A0F38B1255C7|159232 source: Move Mouse.exe |
Source: | Binary string: C:\Dev\ExtendedWPFToolkit\Release\Latest\OpenSource\Generated\Src\Xceed.Wpf.Toolkit\obj\Release\Xceed.Wpf.Toolkit.pdb source: Move Mouse.exe, 00000000.00000002.2252543313.0000020BEE780000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: F:\Work\GitHub\AudioSwitcher\AudioSwitcher.AudioApi (NET45)\obj\Release\AudioSwitcher.AudioApi.pdbp source: Move Mouse.exe, 00000000.00000002.2257235847.0000020BEEF70000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: costura.serilog.sinks.file.pdb.compressed|||Serilog.Sinks.File.pdb|411C5EB1B529AEC73F6A246AB965C25248701E14|10852 source: Move Mouse.exe |
Source: | Binary string: /_/src/Serilog/obj/Release/net47/Serilog.pdb source: Move Mouse.exe, 00000000.00000002.2250843544.0000020BEC630000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: )costura.serilog.sinks.file.pdb.compressed source: Move Mouse.exe, 00000000.00000002.2234625972.0000020B80001000.00000004.00000800.00020000.00000000.sdmp |
Source: | Binary string: C:\projects\serilog-sinks-file\src\Serilog.Sinks.File\obj\Release\net45\Serilog.Sinks.File.pdb source: Move Mouse.exe, 00000000.00000002.2251039273.0000020BEC670000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: C:\Users\Eric\Source\Repos\ejensen\toggle-switch-control\WPF\ToggleSwitch\obj\Release\net46\ToggleSwitch.pdbSHA256 source: Move Mouse.exe, 00000000.00000002.2250632311.0000020BEC540000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: C:\Users\steve\source\repos\movemouse\4x\Move Mouse\obj\Debug\Move Mouse.pdb source: Move Mouse.exe |
Source: | Binary string: costura=costura.costura.dll.compressed=costura.costura.pdb.compressedIcs-cz.xceed.wpf.avalondock.resourceswcostura.cs-cz.xceed.wpf.avalondock.resources.dll.compressedCde.xceed.wpf.avalondock.resourcesqcostura.de.xceed.wpf.avalondock.resources.dll.compressedCes.xceed.wpf.avalondock.resourcesqcostura.es.xceed.wpf.avalondock.resources.dll.compressedCfr.xceed.wpf.avalondock.resourcesqcostura.fr.xceed.wpf.avalondock.resources.dll.compressed1hardcodet.notifyicon.wpf_costura.hardcodet.notifyicon.wpf.dll.compressedChu.xceed.wpf.avalondock.resourcesqcostura.hu.xceed.wpf.avalondock.resources.dll.compressedCit.xceed.wpf.avalondock.resourcesqcostura.it.xceed.wpf.avalondock.resources.dll.compressedIja-jp.xceed.wpf.avalondock.resourceswcostura.ja-jp.xceed.wpf.avalondock.resources.dll.compressed9microsoft.expression.drawinggcostura.microsoft.expression.drawing.dll.compressedSmicrosoft.extensions.logging.abstractions source: Move Mouse.exe |
Source: | Binary string: C:\projects\serilog-sinks-file\src\Serilog.Sinks.File\obj\Release\net45\Serilog.Sinks.File.pdbSHA256 source: Move Mouse.exe, 00000000.00000002.2251039273.0000020BEC670000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: .Aaudioswitcher.audioapi.coreaudioocostura.audioswitcher.audioapi.coreaudio.dll.compressed-audioswitcher.audioapi[costura.audioswitcher.audioapi.dll.compressed'common.logging.coreUcostura.common.logging.core.dll.compressedUcostura.common.logging.core.pdb.compressed source: Move Mouse.exe |
Source: | Binary string: costura.costura.pdb.compressed|||Costura.pdb|6C6000A5EAF8579850AB82A89BD6268776EB51AD|2608 source: Move Mouse.exe |
Source: | Binary string: /_/artifacts/obj/System.Diagnostics.DiagnosticSource/Release/net462/System.Diagnostics.DiagnosticSource.pdbSHA256 source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B9009A000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2245696411.0000020B90001000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2255409070.0000020BEED30000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: Hardcodet.NotifyIcon.Wpf.pdb source: Move Mouse.exe, 00000000.00000002.2253838780.0000020BEEA00000.00000004.08000000.00040000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp |
Source: | Binary string: /_/artifacts/obj/System.Diagnostics.DiagnosticSource/Release/net462/System.Diagnostics.DiagnosticSource.pdb source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B9009A000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2245696411.0000020B90001000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2255409070.0000020BEED30000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: Hardcodet.NotifyIcon.Wpf.pdbSHA256[ source: Move Mouse.exe, 00000000.00000002.2253838780.0000020BEEA00000.00000004.08000000.00040000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp |
Source: | Binary string: costura.common.logging.core.pdb.compressed|||Common.Logging.Core.pdb|26BB39D69119902156BFC725CB12184117222917|11776 source: Move Mouse.exe |
Source: | Binary string: costura.common.logging.pdb.compressed source: Move Mouse.exe |
Source: | Binary string: /_/src/Quartz/obj/Release/net472/Quartz.pdbSHA256 source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2264772996.0000020BF4960000.00000004.08000000.00040000.00000000.sdmp |
Source: Move Mouse.exe, 00000000.00000002.2234625972.0000020B80D34000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2234625972.0000020B80B96000.00000004.00000800.00020000.00000000.sdmp | String found in binary or memory: http://defaultcontainer/Resources/Mouse-SystemTray-Active.ico |
Source: Move Mouse.exe, 00000000.00000002.2234625972.0000020B80D1A000.00000004.00000800.00020000.00000000.sdmp | String found in binary or memory: http://defaultcontainer/Resources/Mouse-SystemTray-Execute.ico |
Source: Move Mouse.exe, 00000000.00000002.2234625972.0000020B80D34000.00000004.00000800.00020000.00000000.sdmp | String found in binary or memory: http://defaultcontainer/Resources/Mouse.ico |
Source: Move Mouse.exe, 00000000.00000002.2253682378.0000020BEE9D0000.00000004.08000000.00040000.00000000.sdmp | String found in binary or memory: http://expression/microsoft.expression.drawing.dll0 |
Source: Move Mouse.exe, 00000000.00000002.2264772996.0000020BF4960000.00000004.08000000.00040000.00000000.sdmp | String found in binary or memory: http://quartznet.sourceforge.net/JobSchedulingData |
Source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2264772996.0000020BF4960000.00000004.08000000.00040000.00000000.sdmp | String found in binary or memory: http://quartznet.sourceforge.net/JobSchedulingData? |
Source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2264772996.0000020BF4960000.00000004.08000000.00040000.00000000.sdmp | String found in binary or memory: http://quartznet.sourceforge.net/JobSchedulingDataT |
Source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2264772996.0000020BF4960000.00000004.08000000.00040000.00000000.sdmp | String found in binary or memory: http://quartznet.sourceforge.net/JobSchedulingData_ |
Source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2264772996.0000020BF4960000.00000004.08000000.00040000.00000000.sdmp | String found in binary or memory: http://quartznet.sourceforge.net/JobSchedulingDatae |
Source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2264772996.0000020BF4960000.00000004.08000000.00040000.00000000.sdmp | String found in binary or memory: http://quartznet.sourceforge.net/JobSchedulingDatah |
Source: Move Mouse.exe | String found in binary or memory: http://schemas.xceed.com/wpf/xaml/toolkit |
Source: Move Mouse.exe, 00000000.00000002.2252543313.0000020BEE780000.00000004.08000000.00040000.00000000.sdmp | String found in binary or memory: http://schemas.xceed.com/wpf/xaml/toolkit&Xceed.Wpf.Toolkit.PropertyGrid.Editors |
Source: Move Mouse.exe, 00000000.00000002.2252543313.0000020BEE780000.00000004.08000000.00040000.00000000.sdmp | String found in binary or memory: http://schemas.xceed.com/wpf/xaml/toolkit&Xceed.Wpf.Toolkit.PropertyGrid.EditorsH |
Source: Move Mouse.exe, 00000000.00000002.2252543313.0000020BEE780000.00000004.08000000.00040000.00000000.sdmp | String found in binary or memory: http://schemas.xceed.com/wpf/xaml/toolkit)Xceed.Wpf.Toolkit.PropertyGrid.Attributes |
Source: Move Mouse.exe, 00000000.00000002.2252543313.0000020BEE780000.00000004.08000000.00040000.00000000.sdmp | String found in binary or memory: http://schemas.xceed.com/wpf/xaml/toolkit)Xceed.Wpf.Toolkit.PropertyGrid.AttributesV |
Source: Move Mouse.exe, 00000000.00000002.2252543313.0000020BEE780000.00000004.08000000.00040000.00000000.sdmp | String found in binary or memory: http://schemas.xceed.com/wpf/xaml/toolkit)Xceed.Wpf.Toolkit.PropertyGrid.Converters |
Source: Move Mouse.exe, 00000000.00000002.2252543313.0000020BEE780000.00000004.08000000.00040000.00000000.sdmp | String found in binary or memory: http://schemas.xceed.com/wpf/xaml/toolkit)Xceed.Wpf.Toolkit.PropertyGrid.ConvertersU |
Source: Move Mouse.exe, 00000000.00000002.2234625972.0000020B8050B000.00000004.00000800.00020000.00000000.sdmp | String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/ |
Source: Move Mouse.exe, 00000000.00000002.2234625972.0000020B80218000.00000004.00000800.00020000.00000000.sdmp | String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name |
Source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp | String found in binary or memory: http://www.hardcodet.net/projects/wpf-notifyicon |
Source: Move Mouse.exe | String found in binary or memory: http://www.hardcodet.net/taskbar |
Source: Move Mouse.exe, 00000000.00000002.2234625972.0000020B8050B000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2234625972.0000020B80B96000.00000004.00000800.00020000.00000000.sdmp | String found in binary or memory: http://www.movemouse.co.uk |
Source: Move Mouse.exe | String found in binary or memory: http://www.movemouse.co.uk/ |
Source: Move Mouse.exe | String found in binary or memory: http://www.quartz-scheduler.org/documentation/quartz-2.3.0/tutorials/crontrigger.html/AddActionButto |
Source: Move Mouse.exe | String found in binary or memory: http://www.quartz-scheduler.org/documentation/quartz-2.3.0/tutorials/crontrigger.htmlphttps://github |
Source: Move Mouse.exe, 00000000.00000002.2234625972.0000020B80B96000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2234625972.0000020B80D1A000.00000004.00000800.00020000.00000000.sdmp | String found in binary or memory: http://www.w3.or |
Source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B9009A000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2245696411.0000020B90001000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2255409070.0000020BEED30000.00000004.08000000.00040000.00000000.sdmp | String found in binary or memory: https://github.com/dotnet/runtime |
Source: Move Mouse.exe, 00000000.00000002.2250632311.0000020BEC540000.00000004.08000000.00040000.00000000.sdmp | String found in binary or memory: https://github.com/ejensen/toggle-switch-control |
Source: Move Mouse.exe, 00000000.00000002.2253838780.0000020BEEA00000.00000004.08000000.00040000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp | String found in binary or memory: https://github.com/hardcodet/wpf-notifyicon |
Source: Move Mouse.exe, 00000000.00000002.2253838780.0000020BEEA00000.00000004.08000000.00040000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp | String found in binary or memory: https://github.com/hardcodet/wpf-notifyicon. |
Source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2264772996.0000020BF4960000.00000004.08000000.00040000.00000000.sdmp | String found in binary or memory: https://github.com/quartznet/quartznet |
Source: Move Mouse.exe, 00000000.00000002.2251039273.0000020BEC670000.00000004.08000000.00040000.00000000.sdmp | String found in binary or memory: https://github.com/serilog/serilog-sinks-file |
Source: Move Mouse.exe, 00000000.00000002.2251039273.0000020BEC670000.00000004.08000000.00040000.00000000.sdmp | String found in binary or memory: https://github.com/serilog/serilog-sinks-fileC |
Source: Move Mouse.exe, 00000000.00000002.2250843544.0000020BEC630000.00000004.08000000.00040000.00000000.sdmp | String found in binary or memory: https://github.com/serilog/serilog.git |
Source: Move Mouse.exe, 00000000.00000002.2250843544.0000020BEC630000.00000004.08000000.00040000.00000000.sdmp | String found in binary or memory: https://github.com/serilog/serilog/pull/819. |
Source: Move Mouse.exe, 00000000.00000002.2234625972.0000020B8050B000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2234625972.0000020B80B96000.00000004.00000800.00020000.00000000.sdmp | String found in binary or memory: https://github.com/sw3103/movemouse |
Source: Move Mouse.exe, 00000000.00000002.2234625972.0000020B80257000.00000004.00000800.00020000.00000000.sdmp | String found in binary or memory: https://github.com/sw3103/movemouse/releases/tag/v4.16.2 |
Source: Move Mouse.exe | String found in binary or memory: https://github.com/sw3103/movemouse/wiki |
Source: Move Mouse.exe | String found in binary or memory: https://github.com/sw3103/movemouse/wiki/Troubleshooting). |
Source: Move Mouse.exe | String found in binary or memory: https://github.com/sw3103/movemouse/wiki/Troubleshooting/TwitterLink_OnMouseDown;https://twitter.com |
Source: Move Mouse.exe, 00000000.00000002.2234625972.0000020B80218000.00000004.00000800.00020000.00000000.sdmp | String found in binary or memory: https://raw.githubusercontent.com |
Source: Move Mouse.exe, 00000000.00000002.2251701161.0000020BEE690000.00000004.00000020.00020000.00000000.sdmp | String found in binary or memory: https://raw.githubusercontent.com/serilog/serilog-sinks-file/7eb21bd4d35d0b8b7d13e6a15851c9903ea9a46 |
Source: Move Mouse.exe, 00000000.00000002.2234625972.0000020B80218000.00000004.00000800.00020000.00000000.sdmp | String found in binary or memory: https://raw.githubusercontent.com/sw3103/movemouse/master/Update_4x.xml |
Source: Move Mouse.exe | String found in binary or memory: https://raw.githubusercontent.com/sw3103/movemouse/master/Update_4x.xml)Update/LatestVersion%Update/ |
Source: Move Mouse.exe | String found in binary or memory: https://raw.githubusercontent.com/sw3103/movemouse/master/Update_4x.xml.contact |
Source: Move Mouse.exe, 00000000.00000002.2234625972.0000020B8050B000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2234625972.0000020B80B96000.00000004.00000800.00020000.00000000.sdmp | String found in binary or memory: https://twitter.com/movemouse |
Source: Move Mouse.exe | String found in binary or memory: https://www.paypal.com |
Source: Move Mouse.exe | String found in binary or memory: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=QZTWHD9CRW5XN-GitHubLink_OnMous |
Source: Move Mouse.exe | String found in binary or memory: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=QZTWHD9CRW5XN4http://www.movemo |
Source: Move Mouse.exe, 00000000.00000002.2253838780.0000020BEEA00000.00000004.08000000.00040000.00000000.sdmp | Binary or memory string: OriginalFilenameHardcodet.NotifyIcon.Wpf.dll> vs Move Mouse.exe |
Source: Move Mouse.exe, 00000000.00000002.2250843544.0000020BEC630000.00000004.08000000.00040000.00000000.sdmp | Binary or memory string: OriginalFilenameSerilog.dll0 vs Move Mouse.exe |
Source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B9009A000.00000004.00000800.00020000.00000000.sdmp | Binary or memory string: OriginalFilenameSystem.Diagnostics.DiagnosticSource.dll@ vs Move Mouse.exe |
Source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B90001000.00000004.00000800.00020000.00000000.sdmp | Binary or memory string: OriginalFilenameSystem.Diagnostics.DiagnosticSource.dll@ vs Move Mouse.exe |
Source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp | Binary or memory string: OriginalFilenameHardcodet.NotifyIcon.Wpf.dll> vs Move Mouse.exe |
Source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp | Binary or memory string: OriginalFilenameQuartz.dll6 vs Move Mouse.exe |
Source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp | Binary or memory string: OriginalFilenameAudioSwitcher.AudioApi.CoreAudio.dllb! vs Move Mouse.exe |
Source: Move Mouse.exe, 00000000.00000002.2250632311.0000020BEC540000.00000004.08000000.00040000.00000000.sdmp | Binary or memory string: OriginalFilenameToggleSwitch.dll\ vs Move Mouse.exe |
Source: Move Mouse.exe, 00000000.00000002.2264772996.0000020BF4960000.00000004.08000000.00040000.00000000.sdmp | Binary or memory string: OriginalFilenameQuartz.dll6 vs Move Mouse.exe |
Source: Move Mouse.exe, 00000000.00000002.2252543313.0000020BEE780000.00000004.08000000.00040000.00000000.sdmp | Binary or memory string: OriginalFilenameXceed.Wpf.Toolkit.dllL vs Move Mouse.exe |
Source: Move Mouse.exe, 00000000.00000002.2251039273.0000020BEC670000.00000004.08000000.00040000.00000000.sdmp | Binary or memory string: OriginalFilenameSerilog.Sinks.File.dllF vs Move Mouse.exe |
Source: Move Mouse.exe, 00000000.00000002.2257363813.0000020BEEF90000.00000004.08000000.00040000.00000000.sdmp | Binary or memory string: OriginalFilenameAudioSwitcher.AudioApi.CoreAudio.dllb! vs Move Mouse.exe |
Source: Move Mouse.exe, 00000000.00000002.2257235847.0000020BEEF70000.00000004.08000000.00040000.00000000.sdmp | Binary or memory string: OriginalFilenameAudioSwitcher.AudioApi.dllN vs Move Mouse.exe |
Source: Move Mouse.exe, 00000000.00000002.2255409070.0000020BEED30000.00000004.08000000.00040000.00000000.sdmp | Binary or memory string: OriginalFilenameSystem.Diagnostics.DiagnosticSource.dll@ vs Move Mouse.exe |
Source: Move Mouse.exe, 00000000.00000002.2234625972.0000020B80001000.00000004.00000800.00020000.00000000.sdmp | Binary or memory string: OriginalFilename vs Move Mouse.exe |
Source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B90366000.00000004.00000800.00020000.00000000.sdmp | Binary or memory string: OriginalFilenameAudioSwitcher.AudioApi.CoreAudio.dllb! vs Move Mouse.exe |
Source: Move Mouse.exe, 00000000.00000002.2253682378.0000020BEE9D0000.00000004.08000000.00040000.00000000.sdmp | Binary or memory string: OriginalFilenameMicrosoft.Expression.Drawing.dll\ vs Move Mouse.exe |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: mscoree.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: apphelp.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: kernel.appcore.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: version.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: vcruntime140_clr0400.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: ucrtbase_clr0400.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: uxtheme.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: cryptsp.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: rsaenh.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: cryptbase.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: dwrite.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: msvcp140_clr0400.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: windows.storage.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: wldp.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: profapi.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: amsi.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: userenv.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: windows.applicationmodel.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: twinapi.appcore.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: wintypes.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: urlmon.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: iertutil.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: srvcli.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: netutils.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: windowscodecs.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: dwmapi.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: d3d9.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: d3d10warp.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: wtsapi32.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: winsta.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: powrprof.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: umpdc.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: textshaping.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: dataexchange.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: d3d11.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: dcomp.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: dxgi.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: resourcepolicyclient.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: dxcore.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: textinputframework.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: coreuicomponents.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: coremessaging.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: ntmarta.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: msctfui.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: uiautomationcore.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: propsys.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: sxs.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: explorerframe.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: d3dcompiler_47.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: sspicli.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: winmm.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: rasapi32.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: rasman.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: rtutils.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: mswsock.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: winhttp.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: ondemandconnroutehelper.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: iphlpapi.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: dhcpcsvc6.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: dhcpcsvc.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: dnsapi.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: winnsi.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: rasadhlp.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: fwpuclnt.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: secur32.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: schannel.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: mskeyprotect.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: ntasn1.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: ncrypt.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: ncryptsslp.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: msasn1.dll | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Section loaded: gpapi.dll | Jump to behavior |
Source: 0.2.Move Mouse.exe.20beed30000.13.raw.unpack, PassThroughPropagator.cs | Suspicious method names: .PassThroughPropagator.Inject |
Source: 0.2.Move Mouse.exe.20b900223f8.4.raw.unpack, HttpHandlerDiagnosticListener.cs | Suspicious method names: .HttpHandlerDiagnosticListener.PerformInjection |
Source: 0.2.Move Mouse.exe.20b900223f8.4.raw.unpack, PassThroughPropagator.cs | Suspicious method names: .PassThroughPropagator.Inject |
Source: 0.2.Move Mouse.exe.20beed30000.13.raw.unpack, LegacyPropagator.cs | Suspicious method names: .LegacyPropagator.Inject |
Source: 0.2.Move Mouse.exe.20beed30000.13.raw.unpack, NoOutputPropagator.cs | Suspicious method names: .NoOutputPropagator.Inject |
Source: 0.2.Move Mouse.exe.20b900223f8.4.raw.unpack, LegacyPropagator.cs | Suspicious method names: .LegacyPropagator.Inject |
Source: 0.2.Move Mouse.exe.20b900223f8.4.raw.unpack, NoOutputPropagator.cs | Suspicious method names: .NoOutputPropagator.Inject |
Source: 0.2.Move Mouse.exe.20beed30000.13.raw.unpack, DistributedContextPropagator.cs | Suspicious method names: .DistributedContextPropagator.Inject |
Source: 0.2.Move Mouse.exe.20beed30000.13.raw.unpack, DistributedContextPropagator.cs | Suspicious method names: .DistributedContextPropagator.InjectBaggage |
Source: 0.2.Move Mouse.exe.20beed30000.13.raw.unpack, HttpHandlerDiagnosticListener.cs | Suspicious method names: .HttpHandlerDiagnosticListener.PerformInjection |
Source: 0.2.Move Mouse.exe.20b900223f8.4.raw.unpack, DistributedContextPropagator.cs | Suspicious method names: .DistributedContextPropagator.Inject |
Source: 0.2.Move Mouse.exe.20b900223f8.4.raw.unpack, DistributedContextPropagator.cs | Suspicious method names: .DistributedContextPropagator.InjectBaggage |
Source: | Binary string: %costura.common.logging.pdb.compressed source: Move Mouse.exe, 00000000.00000002.2234625972.0000020B80001000.00000004.00000800.00020000.00000000.sdmp |
Source: | Binary string: serilog=costura.serilog.dll.compressed%serilog.sinks.fileScostura.serilog.sinks.file.dll.compressedScostura.serilog.sinks.file.pdb.compressedCsv.xceed.wpf.avalondock.resourcesqcostura.sv.xceed.wpf.avalondock.resources.dll.compressed source: Move Mouse.exe |
Source: | Binary string: d:\ExprUpdate2\Blend\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\Microsoft.Expression.Drawing\Microsoft.Expression.Drawing.pdb source: Move Mouse.exe, 00000000.00000002.2253682378.0000020BEE9D0000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: costura.costura.pdb.compressed source: Move Mouse.exe |
Source: | Binary string: *costura.common.logging.core.pdb.compressed source: Move Mouse.exe, 00000000.00000002.2234625972.0000020B80001000.00000004.00000800.00020000.00000000.sdmp |
Source: | Binary string: C:\Users\Eric\Source\Repos\ejensen\toggle-switch-control\WPF\ToggleSwitch\obj\Release\net46\ToggleSwitch.pdb source: Move Mouse.exe, 00000000.00000002.2250632311.0000020BEC540000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: /_/src/Serilog/obj/Release/net47/Serilog.pdbSHA256 source: Move Mouse.exe, 00000000.00000002.2250843544.0000020BEC630000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: F:\Work\GitHub\AudioSwitcher\AudioSwitcher.AudioApi (NET45)\obj\Release\AudioSwitcher.AudioApi.pdb source: Move Mouse.exe, 00000000.00000002.2257235847.0000020BEEF70000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: common.loggingKcostura.common.logging.dll.compressedKcostura.common.logging.pdb.compressed source: Move Mouse.exe |
Source: | Binary string: costura.serilog.sinks.file.pdb.compressed source: Move Mouse.exe |
Source: | Binary string: F:\Work\GitHub\AudioSwitcher\AudioSwitcher.AudioApi.CoreAudio (NET45)\obj\Release\AudioSwitcher.AudioApi.CoreAudio.pdb source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2257363813.0000020BEEF90000.00000004.08000000.00040000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2245696411.0000020B90366000.00000004.00000800.00020000.00000000.sdmp |
Source: | Binary string: costura.common.logging.core.pdb.compressed source: Move Mouse.exe |
Source: | Binary string: /_/src/Quartz/obj/Release/net472/Quartz.pdb source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2264772996.0000020BF4960000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: costura.common.logging.pdb.compressed|||Common.Logging.pdb|AB2E6312E4022E4DD37202422881A0F38B1255C7|159232 source: Move Mouse.exe |
Source: | Binary string: C:\Dev\ExtendedWPFToolkit\Release\Latest\OpenSource\Generated\Src\Xceed.Wpf.Toolkit\obj\Release\Xceed.Wpf.Toolkit.pdb source: Move Mouse.exe, 00000000.00000002.2252543313.0000020BEE780000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: F:\Work\GitHub\AudioSwitcher\AudioSwitcher.AudioApi (NET45)\obj\Release\AudioSwitcher.AudioApi.pdbp source: Move Mouse.exe, 00000000.00000002.2257235847.0000020BEEF70000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: costura.serilog.sinks.file.pdb.compressed|||Serilog.Sinks.File.pdb|411C5EB1B529AEC73F6A246AB965C25248701E14|10852 source: Move Mouse.exe |
Source: | Binary string: /_/src/Serilog/obj/Release/net47/Serilog.pdb source: Move Mouse.exe, 00000000.00000002.2250843544.0000020BEC630000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: )costura.serilog.sinks.file.pdb.compressed source: Move Mouse.exe, 00000000.00000002.2234625972.0000020B80001000.00000004.00000800.00020000.00000000.sdmp |
Source: | Binary string: C:\projects\serilog-sinks-file\src\Serilog.Sinks.File\obj\Release\net45\Serilog.Sinks.File.pdb source: Move Mouse.exe, 00000000.00000002.2251039273.0000020BEC670000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: C:\Users\Eric\Source\Repos\ejensen\toggle-switch-control\WPF\ToggleSwitch\obj\Release\net46\ToggleSwitch.pdbSHA256 source: Move Mouse.exe, 00000000.00000002.2250632311.0000020BEC540000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: C:\Users\steve\source\repos\movemouse\4x\Move Mouse\obj\Debug\Move Mouse.pdb source: Move Mouse.exe |
Source: | Binary string: costura=costura.costura.dll.compressed=costura.costura.pdb.compressedIcs-cz.xceed.wpf.avalondock.resourceswcostura.cs-cz.xceed.wpf.avalondock.resources.dll.compressedCde.xceed.wpf.avalondock.resourcesqcostura.de.xceed.wpf.avalondock.resources.dll.compressedCes.xceed.wpf.avalondock.resourcesqcostura.es.xceed.wpf.avalondock.resources.dll.compressedCfr.xceed.wpf.avalondock.resourcesqcostura.fr.xceed.wpf.avalondock.resources.dll.compressed1hardcodet.notifyicon.wpf_costura.hardcodet.notifyicon.wpf.dll.compressedChu.xceed.wpf.avalondock.resourcesqcostura.hu.xceed.wpf.avalondock.resources.dll.compressedCit.xceed.wpf.avalondock.resourcesqcostura.it.xceed.wpf.avalondock.resources.dll.compressedIja-jp.xceed.wpf.avalondock.resourceswcostura.ja-jp.xceed.wpf.avalondock.resources.dll.compressed9microsoft.expression.drawinggcostura.microsoft.expression.drawing.dll.compressedSmicrosoft.extensions.logging.abstractions source: Move Mouse.exe |
Source: | Binary string: C:\projects\serilog-sinks-file\src\Serilog.Sinks.File\obj\Release\net45\Serilog.Sinks.File.pdbSHA256 source: Move Mouse.exe, 00000000.00000002.2251039273.0000020BEC670000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: .Aaudioswitcher.audioapi.coreaudioocostura.audioswitcher.audioapi.coreaudio.dll.compressed-audioswitcher.audioapi[costura.audioswitcher.audioapi.dll.compressed'common.logging.coreUcostura.common.logging.core.dll.compressedUcostura.common.logging.core.pdb.compressed source: Move Mouse.exe |
Source: | Binary string: costura.costura.pdb.compressed|||Costura.pdb|6C6000A5EAF8579850AB82A89BD6268776EB51AD|2608 source: Move Mouse.exe |
Source: | Binary string: /_/artifacts/obj/System.Diagnostics.DiagnosticSource/Release/net462/System.Diagnostics.DiagnosticSource.pdbSHA256 source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B9009A000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2245696411.0000020B90001000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2255409070.0000020BEED30000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: Hardcodet.NotifyIcon.Wpf.pdb source: Move Mouse.exe, 00000000.00000002.2253838780.0000020BEEA00000.00000004.08000000.00040000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp |
Source: | Binary string: /_/artifacts/obj/System.Diagnostics.DiagnosticSource/Release/net462/System.Diagnostics.DiagnosticSource.pdb source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B9009A000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2245696411.0000020B90001000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2255409070.0000020BEED30000.00000004.08000000.00040000.00000000.sdmp |
Source: | Binary string: Hardcodet.NotifyIcon.Wpf.pdbSHA256[ source: Move Mouse.exe, 00000000.00000002.2253838780.0000020BEEA00000.00000004.08000000.00040000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp |
Source: | Binary string: costura.common.logging.core.pdb.compressed|||Common.Logging.Core.pdb|26BB39D69119902156BFC725CB12184117222917|11776 source: Move Mouse.exe |
Source: | Binary string: costura.common.logging.pdb.compressed source: Move Mouse.exe |
Source: | Binary string: /_/src/Quartz/obj/Release/net472/Quartz.pdbSHA256 source: Move Mouse.exe, 00000000.00000002.2245696411.0000020B900E4000.00000004.00000800.00020000.00000000.sdmp, Move Mouse.exe, 00000000.00000002.2264772996.0000020BF4960000.00000004.08000000.00040000.00000000.sdmp |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Users\user\Desktop\Move Mouse.exe VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\System32\WinMetadata\Windows.Storage.winmd VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\System32\WinMetadata\Windows.Foundation.winmd VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.InteropServices.WindowsRuntime\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.InteropServices.WindowsRuntime.dll VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.dll VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemXml\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemXml.dll VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\System32\WinMetadata\Windows.ApplicationModel.winmd VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.WindowsRuntime\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.WindowsRuntime.dll VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\seguili.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\seguisli.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuii.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\seguisbi.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuiz.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\seguibl.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\seguibli.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemData\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemData.dll VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Controls.Ribbon\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Controls.Ribbon.dll VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
Source: C:\Users\user\Desktop\Move Mouse.exe | Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation | Jump to behavior |