| Source: unknown | Network traffic detected: HTTP traffic on port 49708 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49744 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49865 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49743 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49817 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49742 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49863 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49741 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49862 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49861 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49860 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49789 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49800 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49766 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49743 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49875 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49720 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49852 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49795 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49739 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49859 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49858 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49881 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49857 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49735 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49856 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49734 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49772 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49855 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49733 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49841 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49854 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49732 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49853 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49731 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49852 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49730 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49732 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49851 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49850 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49812 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49858 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49784 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49749 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49806 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49823 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49729 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49777 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49728 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49849 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49714 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49848 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49847 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49886 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49725 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49846 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49790 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49845 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49844 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49722 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49843 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49721 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49842 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49720 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49841 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49731 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49840 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49834 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49748 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49760 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49892 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49828 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49805 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49719 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49718 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49839 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49717 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49838 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49715 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49716 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49837 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49847 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49715 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49836 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49714 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49835 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49713 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49834 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49712 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49833 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49887 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49711 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49832 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49709 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49710 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49831 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49830 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49839 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49822 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49870 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49765 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49853 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49796 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49709 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49708 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49829 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49707 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49811 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49828 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49827 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49705 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49826 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49704 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49754 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49825 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49824 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49823 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49771 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49822 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49788 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49787 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49786 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49785 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49784 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49813 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49783 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49782 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49781 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49780 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49836 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49785 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49807 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49776 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49713 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49845 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49791 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49868 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49759 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49753 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49779 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49778 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49777 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49776 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49775 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49896 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49707 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49774 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49773 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49862 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49894 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49772 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49771 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49892 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49770 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49891 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49890 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49742 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49780 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49879 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49802 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49851 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49830 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49769 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49718 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49768 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49889 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49767 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49888 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49766 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49887 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49765 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49758 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49886 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49764 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49763 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49863 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49884 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49762 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49761 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49760 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49881 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49840 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49880 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49725 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49741 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49857 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49764 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49896 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49770 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49719 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49797 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49801 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49824 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49759 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49758 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49879 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49757 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49878 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49756 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49877 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49876 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49754 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49875 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49891 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49753 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49874 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49752 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49873 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49730 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49872 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49818 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49871 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49870 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49835 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49786 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49874 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49747 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49829 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49880 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49775 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49749 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49846 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49748 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49747 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49792 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49868 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49746 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49867 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49745 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49866 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49890 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49746 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49781 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49878 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49769 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49803 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49826 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49717 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49849 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49889 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49866 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49820 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49837 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49711 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49872 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49728 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49763 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49855 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49752 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49798 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49861 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49735 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49712 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49819 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49844 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49873 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49787 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49729 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49745 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49793 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49850 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49831 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49774 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49757 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49782 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49799 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49734 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49798 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49797 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49796 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49795 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49794 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49793 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49792 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49814 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49791 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49790 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49856 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49768 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49825 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49808 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49884 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49867 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49789 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49733 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49821 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49865 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49710 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49820 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49842 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49779 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49859 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49704 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49871 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49762 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49894 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49833 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49819 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49818 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49799 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49810 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49817 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49816 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49815 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49814 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49813 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49812 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49811 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49810 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49816 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49788 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49767 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49721 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49794 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49827 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49876 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49809 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49808 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49807 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49806 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49805 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49848 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49804 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49773 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49803 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49802 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49801 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49756 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49739 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 443 -> 49800 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49783 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49838 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49678 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49821 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49815 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49877 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49722 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49854 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49809 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49860 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49778 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49673 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49705 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49843 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49761 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49804 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49744 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49832 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49716 -> 443 |
| Source: unknown | Network traffic detected: HTTP traffic on port 49888 -> 443 |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: mscoree.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: kernel.appcore.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: version.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: vcruntime140_clr0400.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: ucrtbase_clr0400.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: ucrtbase_clr0400.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: uxtheme.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: wldp.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: amsi.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: userenv.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: profapi.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: windows.storage.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: cryptsp.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: rsaenh.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: cryptbase.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: windowscodecs.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: dwrite.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: textinputframework.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: coreuicomponents.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: coremessaging.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: ntmarta.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: wintypes.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: wintypes.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: wintypes.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: sxs.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: mpr.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: scrrun.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: sspicli.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Section loaded: textshaping.dll |
| Source: C:\Windows\System32\vssadmin.exe | Section loaded: atl.dll |
| Source: C:\Windows\System32\vssadmin.exe | Section loaded: vssapi.dll |
| Source: C:\Windows\System32\vssadmin.exe | Section loaded: vsstrace.dll |
| Source: C:\Windows\System32\vssadmin.exe | Section loaded: vsstrace.dll |
| Source: C:\Windows\System32\vssadmin.exe | Section loaded: kernel.appcore.dll |
| Source: C:\Windows\System32\vssadmin.exe | Section loaded: vss_ps.dll |
| Source: C:\Windows\System32\vssadmin.exe | Section loaded: atl.dll |
| Source: C:\Windows\System32\vssadmin.exe | Section loaded: vssapi.dll |
| Source: C:\Windows\System32\vssadmin.exe | Section loaded: vsstrace.dll |
| Source: C:\Windows\System32\vssadmin.exe | Section loaded: vsstrace.dll |
| Source: C:\Windows\System32\vssadmin.exe | Section loaded: kernel.appcore.dll |
| Source: C:\Windows\System32\vssadmin.exe | Section loaded: vss_ps.dll |
| Source: C:\Windows\System32\vssadmin.exe | Section loaded: atl.dll |
| Source: C:\Windows\System32\vssadmin.exe | Section loaded: vssapi.dll |
| Source: C:\Windows\System32\vssadmin.exe | Section loaded: vsstrace.dll |
| Source: C:\Windows\System32\vssadmin.exe | Section loaded: kernel.appcore.dll |
| Source: C:\Windows\System32\vssadmin.exe | Section loaded: vss_ps.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: kernel.appcore.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: ifmon.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: iphlpapi.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: mprapi.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: rasmontr.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: rasapi32.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: fwpuclnt.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: rasman.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: mfc42u.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: rasman.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: authfwcfg.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: fwpolicyiomgr.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: firewallapi.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: dnsapi.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: fwbase.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: dhcpcmonitor.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: dot3cfg.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: dot3api.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: onex.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: eappcfg.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: ncrypt.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: eappprxy.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: ntasn1.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: fwcfg.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: hnetmon.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: netshell.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: nlaapi.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: netsetupapi.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: netiohlp.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: dhcpcsvc.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: winnsi.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: nettrace.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: sspicli.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: nshhttp.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: httpapi.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: nshipsec.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: userenv.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: activeds.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: polstore.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: winipsec.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: adsldpc.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: adsldpc.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: nshwfp.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: cabinet.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: p2pnetsh.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: p2p.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: profapi.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: cryptbase.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: rpcnsh.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: wcnnetsh.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: wlanapi.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: whhelper.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: winhttp.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: wlancfg.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: cryptsp.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: wshelper.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: wevtapi.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: mswsock.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: wwancfg.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: wwapi.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: wcmapi.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: rmclient.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: mobilenetworking.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: peerdistsh.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: uxtheme.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: slc.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: sppc.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: gpapi.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: ktmw32.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: mprmsg.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: windows.storage.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: wldp.dll |
| Source: C:\Windows\System32\netsh.exe | Section loaded: msasn1.dll |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_CURRENT_USER\System\CurrentControlSet\Services USBSTOR |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_CURRENT_USER\System\CurrentControlSet\Services USBSTOR |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_CURRENT_USER\System\CurrentControlSet\Services SecurityHealthService |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_CURRENT_USER\System\CurrentControlSet\Services SecurityHealthService |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_CURRENT_USER\System\CurrentControlSet\Services WdNisSvc |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_CURRENT_USER\System\CurrentControlSet\Services WdNisSvc |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_CURRENT_USER\System\CurrentControlSet\Services WinDefend |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_CURRENT_USER\System\CurrentControlSet\Services WinDefend |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\chrome.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\chrome.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\firefox.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\firefox.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\opera.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\opera.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\microsoftedge.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\microsoftedge.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\microsoftedgecp.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\microsoftedgecp.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\notepad++.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\notepad++.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\notepad.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\notepad.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCuiL.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCuiL.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mmc.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mmc.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\gpedit.msc Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\gpedit.msc Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UserAccountControlSettings.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UserAccountControlSettings.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Autoruns64.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Autoruns64.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Autoruns.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Autoruns.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\systemexplorer.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\systemexplorer.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskkill.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskkill.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\powershell.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\powershell.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\yandex.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\yandex.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\attrib.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\attrib.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bcdedit.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bcdedit.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethc.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethc.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mspaint.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mspaint.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dllhost.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dllhost.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rundll.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rundll.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rundll32.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rundll32.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cabinet.dll Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cabinet.dll Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\chkdsk.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\chkdsk.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DBGHELP.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DBGHELP.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DCIMAN32.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DCIMAN32.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wmplayer.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wmplayer.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ksuser.dll Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ksuser.dll Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mpg4dmod.dll Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mpg4dmod.dll Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mydocs.dll Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mydocs.dll Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rasman.dll Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rasman.dll Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\shellstyle.dll Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\shellstyle.dll Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\secpol.msc Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\secpol.msc Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\url.dll Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\url.dll Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\usbui.dll Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\usbui.dll Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\webcheck.dll Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\webcheck.dll Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\recoverydrive.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\recoverydrive.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\logoff.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\logoff.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\control.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\control.exe Debugger |
| Source: C:\Users\user\Downloads\Annabelle.exe | Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Shell |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Users\user\Downloads\Annabelle.exe VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\userbrii.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\userbrili.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\userbrib.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\userbriz.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\cambriai.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\cambriab.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\cambriaz.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\Candara.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\Candaral.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\Candarai.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\Candarali.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\Candarab.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\Candaraz.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\comic.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\constan.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\constani.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\constanb.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\constanz.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\corbel.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\corbell.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\corbeli.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\corbelli.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\corbelb.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\corbelz.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\cour.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\couri.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\courbd.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\courbi.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ebrima.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ebrimabd.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\framd.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\FRADM.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\framdit.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\FRADMIT.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\FRAMDCN.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\FRADMCN.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\FRAHV.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\FRAHVIT.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\Gabriola.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\gadugi.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\gadugib.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\georgia.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\georgiai.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\georgiab.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\georgiaz.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\impact.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\Inkfree.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\javatext.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LeelawUI.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LeelUIsl.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LeelaUIb.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\lucon.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\l_10646.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\malgun.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\malgunsl.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\malgunbd.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\himalaya.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\msjh.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\msjhl.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\msjhbd.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\msjh.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\msjhbd.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ntailu.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ntailub.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\phagspa.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\phagspab.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\taile.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\taileb.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\msyh.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\msyhl.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\msyhbd.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\msyh.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\msyi.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\monbaiti.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\mvboli.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\mmrtext.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\mmrtextb.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\Nirmala.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\NirmalaS.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\NirmalaB.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\pala.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\palai.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\palab.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\palabi.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\segoepr.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\segoeprb.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\segoesc.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\segoescb.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\seguihis.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\simsun.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\simsunb.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\sylfaen.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\symbol.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\trebuc.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\trebucit.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\trebucbd.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\trebucbi.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\webdings.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\wingding.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\YuGothM.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\YuGothL.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\YuGothB.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\YuGothM.ttc VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\holomdl2.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\AGENCYR.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\AGENCYB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ALGER.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BKANT.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ANTQUAI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ANTQUAB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ANTQUABI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ARLRDBD.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BASKVILL.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BAUHS93.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BELL.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BELLI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BELLB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BERNHC.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BOD_R.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BOD_I.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BOD_B.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BOD_BI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BOD_CR.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BOD_BLAR.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BOD_CI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BOD_CB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BOD_BLAI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BOD_CBI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BOD_PSTC.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BOOKOSB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BOOKOSI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BOOKOSBI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BRADHITC.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BRITANIC.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BRLNSR.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BRLNSDB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BRLNSB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BROADW.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BRUSHSCI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\BSSYM7.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\userFR.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\userFI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\userFB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\userST.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\userSTI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\userSTB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\userSTBI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\CASTELAR.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\CENSCBK.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\SCHLBKI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\SCHLBKB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\SCHLBKBI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\CENTAUR.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\CENTURY.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\CHILLER.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\COLONNA.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\COOPBL.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\COPRGTL.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\COPRGTB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\CURLZ___.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\DUBAI-REGULAR.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\DUBAI-MEDIUM.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\DUBAI-LIGHT.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\DUBAI-BOLD.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ELEPHNT.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ELEPHNTI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ENGR.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ERASMD.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ERASLGHT.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ERASDEMI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ERASBD.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\FELIXTI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\FORTE.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\FRABK.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\FRABKIT.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\FREESCPT.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\FRSCRIPT.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\FTLTLT.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\GARA.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\GARAIT.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\GARABD.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\GIGI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\GIL_____.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\GILI____.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\GILB____.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\GILBI___.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\GILC____.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\GLSNECB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\GLECB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\GOTHIC.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\GOTHICI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\GOTHICB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\GOTHICBI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\GOUDOS.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\GOUDOSI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\GOUDOSB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\GOUDYSTO.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\HARLOWSI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\HARNGTON.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\HATTEN.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\HTOWERT.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\HTOWERTI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\IMPRISHA.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\INFROMAN.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ITCBLKAD.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ITCEDSCR.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ITCKRIST.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\JOKERMAN.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\JUICE___.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\KUNSTLER.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LATINWD.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LBRITE.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LBRITED.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LBRITEI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LBRITEDI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LCALLIG.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LEELAWAD.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LEELAWDB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LFAX.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LFAXD.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LFAXI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LFAXDI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LHANDW.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LSANS.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LSANSD.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LSANSI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LSANSDI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LTYPE.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LTYPEO.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LTYPEB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\LTYPEBO.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\MAGNETOB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\MAIAN.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\MATURASC.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\MISTRAL.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\MOD20.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\MSUIGHUR.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\MSUIGHUB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\MTCORSVA.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\MTEXTRA.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\NIAGENG.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\NIAGSOL.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\OCRAEXT.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\OLDENGL.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ONYX.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\OUTLOOK.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\PALSCRI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\PAPYRUS.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\PARCHM.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\PER_____.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\PERI____.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\PERB____.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\PERBI___.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\PERTILI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\PERTIBD.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\PLAYBILL.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\POORICH.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\PRISTINA.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\RAGE.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\RAVIE.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\REFSAN.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\REFSPCL.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ROCK.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ROCKI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ROCKB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ROCKEB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ROCKBI.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ROCC____.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\ROCCB___.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\SCRIPTBL.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\SHOWG.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\SNAP____.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\STENCIL.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\TCM_____.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\TCMI____.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\TCB_____.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\TCBI____.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\TCCM____.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\TCCB____.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\TCCEB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\TEMPSITC.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\VINERITC.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\VIVALDII.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\VLADIMIR.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\WINGDNG2.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\WINGDNG3.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\flat_officeFontsPreview.ttf VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\OFFSYM.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\OFFSYMSL.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\OFFSYMSB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\OFFSYMXL.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\OFFSYML.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\OFFSYMB.TTF VolumeInformation |
| Source: C:\Users\user\Downloads\Annabelle.exe | Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation |
| Source: C:\Windows\System32\netsh.exe | Queries volume information: C:\ VolumeInformation |
Edit tour
chrome.exe (PID: 3740 cmdline: 
rundll32.exe (PID: 6888 cmdline: 
Annabelle.exe (PID: 3912 cmdline: 
vssadmin.exe (PID: 2132 cmdline: 
conhost.exe (PID: 2272 cmdline: 
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node