| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\public\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\public\videos\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\public\pictures\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\public\music\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\public\libraries\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\public\downloads\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\public\documents\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\public\desktop\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\public\accountpictures\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\videos\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\saved games\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\pictures\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\music\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\links\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\favorites\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\downloads\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\documents\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\desktop\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\appdata\roaming\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\appdata\roaming\microsoft\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\appdata\roaming\microsoft\internet explorer\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\appdata\roaming\microsoft\internet explorer\quick launch\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\appdata\local\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\appdata\local\microsoft\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\appdata\local\microsoft\windows sidebar\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\appdata\local\microsoft\windows sidebar\gadgets\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\appdata\local\microsoft\inputpersonalization\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\default\appdata\local\microsoft\inputpersonalization\traineddatastore\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\videos\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\searches\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\saved games\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\recent\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\pictures\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\pictures\camera roll\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\onedrive\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\music\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\links\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\favorites\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\favorites\links\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\downloads\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\documents\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\documents\wshejmdvqc\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\documents\unkrlcvohv\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\documents\snipgpprep\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\documents\qcoiloqikc\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\documents\outlook files\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\documents\nymmpceima\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\documents\nirmekamzh\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\documents\jddhmpcduj\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\documents\izmfbfkmeb\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\documents\gltydmdust\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\contacts\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\word\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\vault\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\templates\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\templates\livecontent\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\templates\livecontent\16\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\templates\livecontent\16\managed\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\templates\livecontent\16\managed\word document building blocks\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\templates\livecontent\16\managed\word document building blocks\1033\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\templates\livecontent\16\managed\word document bibliography styles\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\templates\livecontent\16\managed\smartart graphics\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\templates\livecontent\16\managed\smartart graphics\1033\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\templates\livecontent\16\managed\document themes\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\templates\livecontent\16\managed\document themes\1033\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\systemcertificates\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\systemcertificates\my\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\systemcertificates\my\ctls\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\systemcertificates\my\crls\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\systemcertificates\my\certificates\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\spelling\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\spelling\en-us\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\speech\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\protect\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\protect\s-1-5-21-3853321935-2125563209-4053062332-1002\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\outlook\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\office\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\office\recent\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\network\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\network\connections\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\network\connections\pbk\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\network\connections\pbk\_hiddenpbk\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\internet explorer\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\internet explorer\userdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\internet explorer\userdata\low\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\internet explorer\quick launch\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\taskbar\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\implicitappshortcuts\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\excel\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\excel\xlstart\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\document building blocks\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\document building blocks\1033\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\document building blocks\1033\16\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\credentials\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\bibliography\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\bibliography\style\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\microsoft\addins\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\adobe\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\adobe\logtransport2\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\adobe\linguistics\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\adobe\headlights\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\adobe\flash player\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\adobe\flash player\nativecache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\adobe\acrobat\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\adobe\acrobat\dc\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\adobe\acrobat\dc\security\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\adobe\acrobat\dc\security\crlcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\adobe\acrobat\dc\jscache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\adobe\acrobat\dc\forms\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\roaming\adobe\acrobat\dc\collab\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\microsoft\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\microsoft\internet explorer\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\microsoft\internet explorer\services\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\microsoft\internet explorer\emieuserlist\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\microsoft\internet explorer\emiesitelist\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\microsoft\internet explorer\domstore\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\microsoft\internet explorer\domstore\zd1iy8m6\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\microsoft\internet explorer\domstore\eu2ujfg0\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\microsoft\internet explorer\domstore\4ddqnycn\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\microsoft\internet explorer\domstore\2zcpp068\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\microsoft\cryptneturlcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\adobe\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\adobe\linguistics\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\adobe\acrocef\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\adobe\acrocef\dc\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\adobe\acrocef\dc\acrobat\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\adobe\acrocef\dc\acrobat\cookie\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\adobe\acrobat\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\adobe\acrobat\dc\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\adobe\acrobat\dc\reader\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\adobe\acrobat\dc\reader\desktopnotification\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\adobe\acrobat\dc\reader\desktopnotification\notificationsdb\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\locallow\adobe\acrobat\dc\assets\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\virtualstore\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\publishers\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\publishers\8wekyb3d8bbwe\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\publishers\8wekyb3d8bbwe\settingscontainer\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\publishers\8wekyb3d8bbwe\microsoft.windowsalarms\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\publishers\8wekyb3d8bbwe\licenses\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\publishers\8wekyb3d8bbwe\fonts\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\peerdistrepub\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows_ie_ac_001\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows_ie_ac_001\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows_ie_ac_001\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows_ie_ac_001\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows_ie_ac_001\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.printdialog_cw5n1h2txyewy\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.printdialog_cw5n1h2txyewy\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.printdialog_cw5n1h2txyewy\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.printdialog_cw5n1h2txyewy\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.printdialog_cw5n1h2txyewy\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.printdialog_cw5n1h2txyewy\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.printdialog_cw5n1h2txyewy\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.printdialog_cw5n1h2txyewy\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.printdialog_cw5n1h2txyewy\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.immersivecontrolpanel_cw5n1h2txyewy\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.immersivecontrolpanel_cw5n1h2txyewy\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.immersivecontrolpanel_cw5n1h2txyewy\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.immersivecontrolpanel_cw5n1h2txyewy\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.immersivecontrolpanel_cw5n1h2txyewy\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.immersivecontrolpanel_cw5n1h2txyewy\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.immersivecontrolpanel_cw5n1h2txyewy\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.immersivecontrolpanel_cw5n1h2txyewy\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.immersivecontrolpanel_cw5n1h2txyewy\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.cbspreview_cw5n1h2txyewy\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.cbspreview_cw5n1h2txyewy\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.cbspreview_cw5n1h2txyewy\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.cbspreview_cw5n1h2txyewy\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.cbspreview_cw5n1h2txyewy\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.cbspreview_cw5n1h2txyewy\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.cbspreview_cw5n1h2txyewy\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.cbspreview_cw5n1h2txyewy\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.cbspreview_cw5n1h2txyewy\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.cbspreview_cw5n1h2txyewy\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.cbspreview_cw5n1h2txyewy\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\windows.cbspreview_cw5n1h2txyewy\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunevideo_8wekyb3d8bbwe\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunevideo_8wekyb3d8bbwe\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunevideo_8wekyb3d8bbwe\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunevideo_8wekyb3d8bbwe\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunevideo_8wekyb3d8bbwe\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunevideo_8wekyb3d8bbwe\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunevideo_8wekyb3d8bbwe\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunevideo_8wekyb3d8bbwe\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunevideo_8wekyb3d8bbwe\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunevideo_8wekyb3d8bbwe\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunevideo_8wekyb3d8bbwe\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunevideo_8wekyb3d8bbwe\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunemusic_8wekyb3d8bbwe\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunemusic_8wekyb3d8bbwe\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunemusic_8wekyb3d8bbwe\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunemusic_8wekyb3d8bbwe\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunemusic_8wekyb3d8bbwe\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunemusic_8wekyb3d8bbwe\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunemusic_8wekyb3d8bbwe\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunemusic_8wekyb3d8bbwe\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunemusic_8wekyb3d8bbwe\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunemusic_8wekyb3d8bbwe\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunemusic_8wekyb3d8bbwe\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.zunemusic_8wekyb3d8bbwe\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxspeechtotextoverlay_8wekyb3d8bbwe\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxspeechtotextoverlay_8wekyb3d8bbwe\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxspeechtotextoverlay_8wekyb3d8bbwe\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxspeechtotextoverlay_8wekyb3d8bbwe\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxspeechtotextoverlay_8wekyb3d8bbwe\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxspeechtotextoverlay_8wekyb3d8bbwe\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxspeechtotextoverlay_8wekyb3d8bbwe\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxspeechtotextoverlay_8wekyb3d8bbwe\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxspeechtotextoverlay_8wekyb3d8bbwe\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxspeechtotextoverlay_8wekyb3d8bbwe\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxspeechtotextoverlay_8wekyb3d8bbwe\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxspeechtotextoverlay_8wekyb3d8bbwe\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxidentityprovider_8wekyb3d8bbwe\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxidentityprovider_8wekyb3d8bbwe\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxidentityprovider_8wekyb3d8bbwe\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxidentityprovider_8wekyb3d8bbwe\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxidentityprovider_8wekyb3d8bbwe\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxidentityprovider_8wekyb3d8bbwe\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxidentityprovider_8wekyb3d8bbwe\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxidentityprovider_8wekyb3d8bbwe\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxidentityprovider_8wekyb3d8bbwe\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxidentityprovider_8wekyb3d8bbwe\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxidentityprovider_8wekyb3d8bbwe\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxidentityprovider_8wekyb3d8bbwe\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamingoverlay_8wekyb3d8bbwe\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamingoverlay_8wekyb3d8bbwe\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamingoverlay_8wekyb3d8bbwe\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamingoverlay_8wekyb3d8bbwe\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamingoverlay_8wekyb3d8bbwe\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamingoverlay_8wekyb3d8bbwe\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamingoverlay_8wekyb3d8bbwe\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamingoverlay_8wekyb3d8bbwe\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamingoverlay_8wekyb3d8bbwe\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamingoverlay_8wekyb3d8bbwe\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamingoverlay_8wekyb3d8bbwe\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamingoverlay_8wekyb3d8bbwe\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgameoverlay_8wekyb3d8bbwe\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgameoverlay_8wekyb3d8bbwe\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgameoverlay_8wekyb3d8bbwe\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgameoverlay_8wekyb3d8bbwe\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgameoverlay_8wekyb3d8bbwe\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgameoverlay_8wekyb3d8bbwe\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgameoverlay_8wekyb3d8bbwe\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgameoverlay_8wekyb3d8bbwe\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgameoverlay_8wekyb3d8bbwe\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgameoverlay_8wekyb3d8bbwe\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgameoverlay_8wekyb3d8bbwe\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgameoverlay_8wekyb3d8bbwe\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamecallableui_cw5n1h2txyewy\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamecallableui_cw5n1h2txyewy\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamecallableui_cw5n1h2txyewy\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamecallableui_cw5n1h2txyewy\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamecallableui_cw5n1h2txyewy\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamecallableui_cw5n1h2txyewy\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamecallableui_cw5n1h2txyewy\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamecallableui_cw5n1h2txyewy\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamecallableui_cw5n1h2txyewy\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamecallableui_cw5n1h2txyewy\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamecallableui_cw5n1h2txyewy\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxgamecallableui_cw5n1h2txyewy\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxapp_8wekyb3d8bbwe\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxapp_8wekyb3d8bbwe\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxapp_8wekyb3d8bbwe\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxapp_8wekyb3d8bbwe\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxapp_8wekyb3d8bbwe\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxapp_8wekyb3d8bbwe\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxapp_8wekyb3d8bbwe\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxapp_8wekyb3d8bbwe\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxapp_8wekyb3d8bbwe\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxapp_8wekyb3d8bbwe\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxapp_8wekyb3d8bbwe\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xboxapp_8wekyb3d8bbwe\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xbox.tcui_8wekyb3d8bbwe\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xbox.tcui_8wekyb3d8bbwe\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xbox.tcui_8wekyb3d8bbwe\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xbox.tcui_8wekyb3d8bbwe\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xbox.tcui_8wekyb3d8bbwe\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xbox.tcui_8wekyb3d8bbwe\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xbox.tcui_8wekyb3d8bbwe\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xbox.tcui_8wekyb3d8bbwe\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xbox.tcui_8wekyb3d8bbwe\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xbox.tcui_8wekyb3d8bbwe\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xbox.tcui_8wekyb3d8bbwe\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.xbox.tcui_8wekyb3d8bbwe\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsstore_8wekyb3d8bbwe\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsstore_8wekyb3d8bbwe\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsstore_8wekyb3d8bbwe\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsstore_8wekyb3d8bbwe\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsstore_8wekyb3d8bbwe\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsstore_8wekyb3d8bbwe\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsstore_8wekyb3d8bbwe\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsstore_8wekyb3d8bbwe\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsstore_8wekyb3d8bbwe\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsstore_8wekyb3d8bbwe\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsstore_8wekyb3d8bbwe\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsstore_8wekyb3d8bbwe\ac\inetcookies\ese\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsstore_8wekyb3d8bbwe\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowssoundrecorder_8wekyb3d8bbwe\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowssoundrecorder_8wekyb3d8bbwe\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowssoundrecorder_8wekyb3d8bbwe\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowssoundrecorder_8wekyb3d8bbwe\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowssoundrecorder_8wekyb3d8bbwe\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowssoundrecorder_8wekyb3d8bbwe\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowssoundrecorder_8wekyb3d8bbwe\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowssoundrecorder_8wekyb3d8bbwe\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowssoundrecorder_8wekyb3d8bbwe\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowssoundrecorder_8wekyb3d8bbwe\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowssoundrecorder_8wekyb3d8bbwe\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowssoundrecorder_8wekyb3d8bbwe\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsmaps_8wekyb3d8bbwe\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsmaps_8wekyb3d8bbwe\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsmaps_8wekyb3d8bbwe\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsmaps_8wekyb3d8bbwe\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsmaps_8wekyb3d8bbwe\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsmaps_8wekyb3d8bbwe\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsmaps_8wekyb3d8bbwe\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsmaps_8wekyb3d8bbwe\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsmaps_8wekyb3d8bbwe\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsmaps_8wekyb3d8bbwe\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsmaps_8wekyb3d8bbwe\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsmaps_8wekyb3d8bbwe\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsfeedbackhub_8wekyb3d8bbwe\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsfeedbackhub_8wekyb3d8bbwe\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsfeedbackhub_8wekyb3d8bbwe\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsfeedbackhub_8wekyb3d8bbwe\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsfeedbackhub_8wekyb3d8bbwe\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsfeedbackhub_8wekyb3d8bbwe\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsfeedbackhub_8wekyb3d8bbwe\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsfeedbackhub_8wekyb3d8bbwe\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsfeedbackhub_8wekyb3d8bbwe\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsfeedbackhub_8wekyb3d8bbwe\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsfeedbackhub_8wekyb3d8bbwe\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsfeedbackhub_8wekyb3d8bbwe\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\localstate\localfiles\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\localstate\localfiles\1230\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\localstate\files\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\localstate\files\s0\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\localstate\files\s0\2\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\localstate\files\s0\1\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\ac\inethistory\backgroundtransferapigroup\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\ac\inethistory\backgroundtransferapi\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\ac\inetcookies\ese\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\ac\backgroundtransferapi\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscamera_8wekyb3d8bbwe\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscamera_8wekyb3d8bbwe\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscamera_8wekyb3d8bbwe\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscamera_8wekyb3d8bbwe\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscamera_8wekyb3d8bbwe\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscamera_8wekyb3d8bbwe\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscamera_8wekyb3d8bbwe\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscamera_8wekyb3d8bbwe\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscamera_8wekyb3d8bbwe\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscamera_8wekyb3d8bbwe\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscamera_8wekyb3d8bbwe\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscamera_8wekyb3d8bbwe\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscalculator_8wekyb3d8bbwe\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscalculator_8wekyb3d8bbwe\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscalculator_8wekyb3d8bbwe\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscalculator_8wekyb3d8bbwe\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscalculator_8wekyb3d8bbwe\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscalculator_8wekyb3d8bbwe\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscalculator_8wekyb3d8bbwe\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscalculator_8wekyb3d8bbwe\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscalculator_8wekyb3d8bbwe\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscalculator_8wekyb3d8bbwe\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscalculator_8wekyb3d8bbwe\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowscalculator_8wekyb3d8bbwe\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsalarms_8wekyb3d8bbwe\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsalarms_8wekyb3d8bbwe\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsalarms_8wekyb3d8bbwe\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsalarms_8wekyb3d8bbwe\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsalarms_8wekyb3d8bbwe\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsalarms_8wekyb3d8bbwe\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsalarms_8wekyb3d8bbwe\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsalarms_8wekyb3d8bbwe\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsalarms_8wekyb3d8bbwe\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsalarms_8wekyb3d8bbwe\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsalarms_8wekyb3d8bbwe\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windowsalarms_8wekyb3d8bbwe\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\ac\microsoft\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.secureassessmentbrowser_cw5n1h2txyewy\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.secureassessmentbrowser_cw5n1h2txyewy\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.secureassessmentbrowser_cw5n1h2txyewy\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.secureassessmentbrowser_cw5n1h2txyewy\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.secureassessmentbrowser_cw5n1h2txyewy\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.secureassessmentbrowser_cw5n1h2txyewy\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.secureassessmentbrowser_cw5n1h2txyewy\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.secureassessmentbrowser_cw5n1h2txyewy\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.secureassessmentbrowser_cw5n1h2txyewy\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.secureassessmentbrowser_cw5n1h2txyewy\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.secureassessmentbrowser_cw5n1h2txyewy\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.secureassessmentbrowser_cw5n1h2txyewy\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.sechealthui_cw5n1h2txyewy\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.sechealthui_cw5n1h2txyewy\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.sechealthui_cw5n1h2txyewy\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.sechealthui_cw5n1h2txyewy\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.sechealthui_cw5n1h2txyewy\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.sechealthui_cw5n1h2txyewy\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.sechealthui_cw5n1h2txyewy\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.sechealthui_cw5n1h2txyewy\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.sechealthui_cw5n1h2txyewy\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.sechealthui_cw5n1h2txyewy\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.sechealthui_cw5n1h2txyewy\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.sechealthui_cw5n1h2txyewy\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.pinningconfirmationdialog_cw5n1h2txyewy\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.pinningconfirmationdialog_cw5n1h2txyewy\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.pinningconfirmationdialog_cw5n1h2txyewy\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.pinningconfirmationdialog_cw5n1h2txyewy\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.pinningconfirmationdialog_cw5n1h2txyewy\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.pinningconfirmationdialog_cw5n1h2txyewy\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.pinningconfirmationdialog_cw5n1h2txyewy\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.pinningconfirmationdialog_cw5n1h2txyewy\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.pinningconfirmationdialog_cw5n1h2txyewy\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.pinningconfirmationdialog_cw5n1h2txyewy\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.pinningconfirmationdialog_cw5n1h2txyewy\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.pinningconfirmationdialog_cw5n1h2txyewy\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\tempstate\sharecache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.peopleexperiencehost_cw5n1h2txyewy\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.peopleexperiencehost_cw5n1h2txyewy\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.peopleexperiencehost_cw5n1h2txyewy\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.peopleexperiencehost_cw5n1h2txyewy\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.peopleexperiencehost_cw5n1h2txyewy\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.peopleexperiencehost_cw5n1h2txyewy\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.peopleexperiencehost_cw5n1h2txyewy\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.peopleexperiencehost_cw5n1h2txyewy\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.peopleexperiencehost_cw5n1h2txyewy\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.peopleexperiencehost_cw5n1h2txyewy\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.peopleexperiencehost_cw5n1h2txyewy\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.peopleexperiencehost_cw5n1h2txyewy\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.parentalcontrols_cw5n1h2txyewy\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.parentalcontrols_cw5n1h2txyewy\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.parentalcontrols_cw5n1h2txyewy\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.parentalcontrols_cw5n1h2txyewy\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.parentalcontrols_cw5n1h2txyewy\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.parentalcontrols_cw5n1h2txyewy\localstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.parentalcontrols_cw5n1h2txyewy\localcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.parentalcontrols_cw5n1h2txyewy\appdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.parentalcontrols_cw5n1h2txyewy\ac\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.parentalcontrols_cw5n1h2txyewy\ac\inethistory\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.parentalcontrols_cw5n1h2txyewy\ac\inetcookies\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.parentalcontrols_cw5n1h2txyewy\ac\inetcache\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.oobenetworkconnectionflow_cw5n1h2txyewy\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.oobenetworkconnectionflow_cw5n1h2txyewy\tempstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.oobenetworkconnectionflow_cw5n1h2txyewy\systemappdata\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.oobenetworkconnectionflow_cw5n1h2txyewy\settings\how_can_i_decrypt_my_files.txt | Jump to behavior |
| Source: C:\Users\user\AppData\Roaming\mssecsvc.exe | File created: c:\users\user\appdata\local\packages\microsoft.windows.oobenetworkconnectionflow_cw5n1h2txyewy\roamingstate\how_can_i_decrypt_my_files.txt | Jump to behavior |
Edit tour
01730499.exe (PID: 6420 cmdline: 
cmd.exe (PID: 5536 cmdline: 
notepad.exe (PID: 5684 cmdline: 
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node