Click to jump to signature section
Source: C:\Windows\System32\OpenWith.exe | Section loaded: edgegdi.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: kernel.appcore.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: uxtheme.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: onecoreuapcommonproxystub.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: windows.storage.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: wldp.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: twinui.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: wintypes.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: powrprof.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: dwmapi.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: pdh.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: umpdc.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: onecorecommonproxystub.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: actxprxy.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: propsys.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: windows.staterepositoryps.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: windows.ui.appdefaults.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: windows.ui.immersive.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: profapi.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: ntmarta.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: uiautomationcore.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: dui70.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: duser.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: dwrite.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: bcp47mrm.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: uianimation.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: d3d11.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: dxgi.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: d3d10warp.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: resourcepolicyclient.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: dxcore.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: dcomp.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: oleacc.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: edputil.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: windows.ui.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: windowmanagementapi.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: textinputframework.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: inputhost.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: coreuicomponents.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: coremessaging.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: twinapi.appcore.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: coremessaging.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: twinapi.appcore.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: coremessaging.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: coreuicomponents.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: windowscodecs.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: thumbcache.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: policymanager.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: msvcp110_win.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: apphelp.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: appresolver.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: bcp47langs.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: slc.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: userenv.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: sppc.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: tiledatarepository.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: staterepository.core.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: windows.staterepository.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: wtsapi32.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: windows.staterepositorycore.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: sxs.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: directmanipulation.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: textshaping.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: mrmcorer.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: urlmon.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: iertutil.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: srvcli.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: netutils.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Section loaded: photometadatahandler.dll | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Process information set: NOOPENFILEERRORBOX | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Queries volume information: C:\Program Files\WindowsApps\Microsoft.WindowsStore_22403.1401.5.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-standard\theme-light\StoreAppList.scale-100.png VolumeInformation | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Queries volume information: C:\Windows\Fonts\segmdl2.ttf VolumeInformation | Jump to behavior |
Source: C:\Windows\System32\OpenWith.exe | Queries volume information: C:\Windows\Fonts\segmdl2.ttf VolumeInformation | Jump to behavior |
Source: OpenWith.exe, 00000004.00000003.69141205759.000002212813F000.00000004.00000020.00020000.00000000.sdmp, OpenWith.exe, 00000004.00000002.69143822398.000002212813F000.00000004.00000020.00020000.00000000.sdmp, OpenWith.exe, 00000004.00000003.69138834077.0000022128131000.00000004.00000020.00020000.00000000.sdmp, OpenWith.exe, 00000004.00000003.69140772342.0000022128138000.00000004.00000020.00020000.00000000.sdmp | Binary or memory string: #c:\users\user\desktop\procexp.exe |