Click to jump to signature section
Source: classification engine | Classification label: clean0.winTXT@1/0@0/0 |
Source: C:\Windows\System32\notepad.exe | Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers |
Source: C:\Windows\System32\notepad.exe | Section loaded: kernel.appcore.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: uxtheme.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: mrmcorer.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: windows.storage.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: wldp.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: textshaping.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: efswrt.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: mpr.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: wintypes.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: twinapi.appcore.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: oleacc.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: textinputframework.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: coreuicomponents.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: coremessaging.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: ntmarta.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: urlmon.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: iertutil.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: srvcli.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: netutils.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: propsys.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: policymanager.dll |
Source: C:\Windows\System32\notepad.exe | Section loaded: msvcp110_win.dll |
Source: C:\Windows\System32\notepad.exe | Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11659a23-5884-4d1b-9cf6-67d6f4f90b36}\InProcServer32 |
Source: C:\Windows\System32\notepad.exe | Queries volume information: C:\Users\user\Desktop\NoMessageID.txt VolumeInformation |