Source: C:\Windows\System32\OpenWith.exe |
Section loaded: edgegdi.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: kernel.appcore.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: uxtheme.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: onecoreuapcommonproxystub.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: windows.storage.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: wldp.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: twinui.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: wintypes.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: powrprof.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: dwmapi.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: pdh.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: umpdc.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: onecorecommonproxystub.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: actxprxy.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: propsys.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: windows.staterepositoryps.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: windows.ui.appdefaults.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: windows.ui.immersive.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: profapi.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: ntmarta.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: uiautomationcore.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: dui70.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: duser.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: dwrite.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: bcp47mrm.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: uianimation.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: d3d11.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: dxgi.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: d3d10warp.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: resourcepolicyclient.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: dxcore.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: dcomp.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: oleacc.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: edputil.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: windows.ui.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: windowmanagementapi.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: textinputframework.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: inputhost.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: coreuicomponents.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: coremessaging.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: twinapi.appcore.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: coremessaging.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: twinapi.appcore.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: coremessaging.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: coreuicomponents.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: windowscodecs.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: thumbcache.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: policymanager.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: msvcp110_win.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: apphelp.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: appresolver.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: bcp47langs.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: slc.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: userenv.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: sppc.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: tiledatarepository.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: staterepository.core.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: windows.staterepository.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: wtsapi32.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: windows.staterepositorycore.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: sxs.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: directmanipulation.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: textshaping.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: mrmcorer.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: urlmon.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: iertutil.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: srvcli.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: netutils.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Section loaded: photometadatahandler.dll |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Queries volume information: C:\Program Files\WindowsApps\Microsoft.WindowsStore_22403.1401.5.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-standard\theme-light\StoreAppList.scale-100.png VolumeInformation |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Queries volume information: C:\Windows\Fonts\segmdl2.ttf VolumeInformation |
Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe |
Queries volume information: C:\Windows\Fonts\segmdl2.ttf VolumeInformation |
Jump to behavior |
Source: OpenWith.exe, 00000004.00000003.69141205759.000002212813F000.00000004.00000020.00020000.00000000.sdmp, OpenWith.exe, 00000004.00000002.69143822398.000002212813F000.00000004.00000020.00020000.00000000.sdmp, OpenWith.exe, 00000004.00000003.69138834077.0000022128131000.00000004.00000020.00020000.00000000.sdmp, OpenWith.exe, 00000004.00000003.69140772342.0000022128138000.00000004.00000020.00020000.00000000.sdmp |
Binary or memory string: #c:\users\user\desktop\procexp.exe |