Source: New FedEx paper work review.exe, 00000001.00000002.1028180638.0000000002E61000.00000004.00000001.sdmp |
String found in binary or memory: http://127.0.0.1:HTTP/1.1 |
Source: New FedEx paper work review.exe, 00000001.00000002.1028180638.0000000002E61000.00000004.00000001.sdmp |
String found in binary or memory: http://DynDns.comDynDNS |
Source: New FedEx paper work review.exe, 00000001.00000002.1028180638.0000000002E61000.00000004.00000001.sdmp |
String found in binary or memory: http://TSGxUW.com |
Source: New FedEx paper work review.exe, 00000001.00000002.1028976039.00000000031CE000.00000004.00000001.sdmp |
String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04 |
Source: New FedEx paper work review.exe, 00000001.00000002.1028976039.00000000031CE000.00000004.00000001.sdmp |
String found in binary or memory: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt0# |
Source: New FedEx paper work review.exe, 00000001.00000002.1028955305.00000000031C8000.00000004.00000001.sdmp |
String found in binary or memory: http://mail.privateemail.com |
Source: New FedEx paper work review.exe, 00000001.00000002.1028976039.00000000031CE000.00000004.00000001.sdmp |
String found in binary or memory: http://ocsp.comodoca.com0 |
Source: New FedEx paper work review.exe, 00000001.00000002.1028976039.00000000031CE000.00000004.00000001.sdmp |
String found in binary or memory: http://ocsp.sectigo.com0 |
Source: New FedEx paper work review.exe, 00000000.00000002.675657030.0000000003271000.00000004.00000001.sdmp |
String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name |
Source: New FedEx paper work review.exe, 00000001.00000002.1028180638.0000000002E61000.00000004.00000001.sdmp |
String found in binary or memory: https://jeQsgpMQfgg21VTI.net |
Source: New FedEx paper work review.exe, 00000001.00000002.1028976039.00000000031CE000.00000004.00000001.sdmp |
String found in binary or memory: https://sectigo.com/CPS0 |
Source: New FedEx paper work review.exe, 00000000.00000002.677503823.0000000004271000.00000004.00000001.sdmp, New FedEx paper work review.exe, 00000001.00000002.1026177897.0000000000402000.00000040.00000001.sdmp |
String found in binary or memory: https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip |
Source: New FedEx paper work review.exe, 00000001.00000002.1028180638.0000000002E61000.00000004.00000001.sdmp |
String found in binary or memory: https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 0_2_00E06DB9 |
0_2_00E06DB9 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 0_2_031EDB4C |
0_2_031EDB4C |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 0_2_031EC3A0 |
0_2_031EC3A0 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 0_2_031EE211 |
0_2_031EE211 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 0_2_031EA758 |
0_2_031EA758 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 0_2_031EF838 |
0_2_031EF838 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 0_2_031EF828 |
0_2_031EF828 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 0_2_05D03658 |
0_2_05D03658 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 0_2_05D09670 |
0_2_05D09670 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 0_2_05D09663 |
0_2_05D09663 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 0_2_05D03668 |
0_2_05D03668 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 0_2_05D04B22 |
0_2_05D04B22 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_0138B698 |
1_2_0138B698 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_0138665C |
1_2_0138665C |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_01397020 |
1_2_01397020 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_0139A0C8 |
1_2_0139A0C8 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_013924C0 |
1_2_013924C0 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_01394738 |
1_2_01394738 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_01393151 |
1_2_01393151 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_0139318A |
1_2_0139318A |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_013931E3 |
1_2_013931E3 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_0139E820 |
1_2_0139E820 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_01393331 |
1_2_01393331 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_01393316 |
1_2_01393316 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_013933B7 |
1_2_013933B7 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_01393383 |
1_2_01393383 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_0139323A |
1_2_0139323A |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_0139321C |
1_2_0139321C |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_01396298 |
1_2_01396298 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_0139328D |
1_2_0139328D |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_013932DE |
1_2_013932DE |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_01393510 |
1_2_01393510 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_01399CB0 |
1_2_01399CB0 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_0139349B |
1_2_0139349B |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_013934E0 |
1_2_013934E0 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_01396F80 |
1_2_01396F80 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_013D5D38 |
1_2_013D5D38 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_013D0828 |
1_2_013D0828 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_013DAF98 |
1_2_013DAF98 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_013DD250 |
1_2_013DD250 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_013DC648 |
1_2_013DC648 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_013D7128 |
1_2_013D7128 |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Code function: 1_2_013DA320 |
1_2_013DA320 |
Source: New FedEx paper work review.exe, 00000000.00000002.680228549.0000000006400000.00000004.00000001.sdmp |
Binary or memory string: OriginalFilenamePositiveSign.dll< vs New FedEx paper work review.exe |
Source: New FedEx paper work review.exe, 00000000.00000002.675657030.0000000003271000.00000004.00000001.sdmp |
Binary or memory string: OriginalFilenameSoapName.dll2 vs New FedEx paper work review.exe |
Source: New FedEx paper work review.exe, 00000000.00000002.675657030.0000000003271000.00000004.00000001.sdmp |
Binary or memory string: OriginalFilenamesrfpYaXxCpIvMvkSQOGVRoHtylIkrSAz.exe4 vs New FedEx paper work review.exe |
Source: New FedEx paper work review.exe, 00000000.00000002.674710371.0000000000EB8000.00000002.00020000.sdmp |
Binary or memory string: OriginalFilenameStreamTokenReader.exe8 vs New FedEx paper work review.exe |
Source: New FedEx paper work review.exe, 00000001.00000002.1030749233.00000000061C0000.00000002.00000001.sdmp |
Binary or memory string: OriginalFilenamemscorrc.dllT vs New FedEx paper work review.exe |
Source: New FedEx paper work review.exe, 00000001.00000002.1027347384.0000000001310000.00000002.00000001.sdmp |
Binary or memory string: OriginalFilenamewshom.ocx.mui vs New FedEx paper work review.exe |
Source: New FedEx paper work review.exe, 00000001.00000002.1026177897.0000000000402000.00000040.00000001.sdmp |
Binary or memory string: OriginalFilenamesrfpYaXxCpIvMvkSQOGVRoHtylIkrSAz.exe4 vs New FedEx paper work review.exe |
Source: New FedEx paper work review.exe, 00000001.00000000.674014837.0000000000AE8000.00000002.00020000.sdmp |
Binary or memory string: OriginalFilenameStreamTokenReader.exe8 vs New FedEx paper work review.exe |
Source: New FedEx paper work review.exe, 00000001.00000002.1026413397.0000000000EF8000.00000004.00000001.sdmp |
Binary or memory string: OriginalFilenameUNKNOWN_FILET vs New FedEx paper work review.exe |
Source: New FedEx paper work review.exe |
Binary or memory string: OriginalFilenameStreamTokenReader.exe8 vs New FedEx paper work review.exe |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Queries volume information: C:\Users\user\Desktop\New FedEx paper work review.exe VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Queries volume information: C:\Users\user\Desktop\New FedEx paper work review.exe VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\New FedEx paper work review.exe |
Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation |
Jump to behavior |