Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: mscoree.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: apphelp.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: kernel.appcore.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: version.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: vcruntime140_clr0400.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: ucrtbase_clr0400.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: ucrtbase_clr0400.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: uxtheme.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: sspicli.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: cryptsp.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: rsaenh.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: cryptbase.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: wbemcomn.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: amsi.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: userenv.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: profapi.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: windows.storage.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: wldp.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: rasapi32.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: rasman.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: rtutils.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: mswsock.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: winhttp.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: ondemandconnroutehelper.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: iphlpapi.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: dhcpcsvc6.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: dhcpcsvc.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: dnsapi.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: winnsi.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: rasadhlp.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: fwpuclnt.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: propsys.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: edputil.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: urlmon.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: iertutil.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: srvcli.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: netutils.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: windows.staterepositoryps.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: wintypes.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: appresolver.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: bcp47langs.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: slc.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: sppc.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: onecorecommonproxystub.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: onecoreuapcommonproxystub.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: sxs.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: mpr.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: scrrun.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: linkinfo.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: ntshrui.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: cscapi.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: avicap32.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: msvfw32.dll |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Section loaded: winmm.dll |
Jump to behavior |
Source: C:\Windows\System32\schtasks.exe |
Section loaded: kernel.appcore.dll |
Jump to behavior |
Source: C:\Windows\System32\schtasks.exe |
Section loaded: taskschd.dll |
Jump to behavior |
Source: C:\Windows\System32\schtasks.exe |
Section loaded: sspicli.dll |
Jump to behavior |
Source: C:\Windows\System32\schtasks.exe |
Section loaded: xmllite.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: mscoree.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: apphelp.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: kernel.appcore.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: version.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: vcruntime140_clr0400.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: ucrtbase_clr0400.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: ucrtbase_clr0400.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: uxtheme.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: sspicli.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: cryptsp.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: rsaenh.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: cryptbase.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: mscoree.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: kernel.appcore.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: version.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: vcruntime140_clr0400.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: ucrtbase_clr0400.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: ucrtbase_clr0400.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: uxtheme.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: sspicli.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: cryptsp.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: rsaenh.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: cryptbase.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: mscoree.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: kernel.appcore.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: version.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: vcruntime140_clr0400.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: ucrtbase_clr0400.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: ucrtbase_clr0400.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: uxtheme.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: sspicli.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: cryptsp.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: rsaenh.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: cryptbase.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: mscoree.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: kernel.appcore.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: version.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: vcruntime140_clr0400.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: ucrtbase_clr0400.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: uxtheme.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: sspicli.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: cryptsp.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: rsaenh.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: cryptbase.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: mscoree.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: kernel.appcore.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: version.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: vcruntime140_clr0400.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: ucrtbase_clr0400.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: ucrtbase_clr0400.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: uxtheme.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: sspicli.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: cryptsp.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: rsaenh.dll |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Section loaded: cryptbase.dll |
Jump to behavior |
Source: W1FREE.exe, rJQ9eU60npeq652Ibo7jvQRXM3rUdlYngpwbUMtxi.cs |
High entropy of concatenated method names: 'twi6K42bPTI4GYQ2n6IsgBa8hmZagm1U1c3lHShmH', 'pd60DaUs74BzskNbNT6A1gpuowjaPpKAFvmmHKmz6', 'WkiiAo4UsOuxoNgzFOBvuWbV5dZM8oJ6bdMBo9FqY', 'O61PK4T27e2ko0ux', 'do5cd0W2YtVxAzA4', 'iGn1249pBOkO0He2', 'x9uFtPMH24vwKfrD', 'kQ8Sq3SK06BRDWEf', 'mM658JXFajkwzrew', 'wGJghNiG7QBcQvgl' |
Source: W1FREE.exe, 0jCpSn3TPAiA1lUmUeGqUs0q.cs |
High entropy of concatenated method names: 'APUhdyFM3p8VQO8im0tPPWLDrpUSVmeGxTqyG1xxF', 'dnrjiAuGSQBMv6SMkHl3Nen268nihLPPQb1vBIJp9', 'WwOJf0xn8ZQaqUpTM5sVgfMB45DIJSNdBLxdY8IbI', 'XZ4E5rO0tQ5oWB8DG6CjKvYLtgFYAgqXTFkNVKab8' |
Source: W1FREE.exe, nCyWPpVLNarjz8xbfSRSEn60.cs |
High entropy of concatenated method names: 'Equals', 'GetHashCode', 'GetType', 'ToString', 'Create__Instance__', 'Dispose__Instance__', 'xhUg7OzetlYqccN2GXjWru6gaczDolrHBW2w6Q2Dx', 'aYRQG8twAkHNgK3B6VvdE9g2eriVfA27rnQjc6PYv', '_4O2M0VijjDsV91docL8dyBZn37l99A6yH8IOUOfUO', 'TAJhLWNIKRwhgBJMAngVKSaXns5T1WLXqvBIKy7T1' |
Source: W1FREE.exe, MtWeevp3Ou6I0D9xZmY4TWpP.cs |
High entropy of concatenated method names: '_8cawZgo3hwxTF2OX1GlJKMe3', '_3HNkuljQi9I1KUd6Ok5x82gO', 'PvABkv8h23X1x3rqe2HfxzJY', 'agOZabpfCbyDM4Lal205i7Mr', '_6dcLdQh5gMgNAD4pGTnFP9Vl', 'SXbDnS14rMZU5U0wl2jhEfIX', 'iKYmL6S8wDSYECgCcDoE1uIp', 'S7wgpZ9xdM8DaOcDLCbLDoeo', 'BdFoWeM3p98ZWEOaVxdBioV7', 'CDiZ2FOgrQwwZSzeGksYL29R' |
Source: W1FREE.exe, FuD0wDdNzpjleaHRPL2HVwuy4urGRNvot3Vq0xbZ2Sokj3t4TymJdGe9.cs |
High entropy of concatenated method names: 'QGT6IrhPmY39lxWGU1srAJf76HKcE9b0yeXVqU83PfjQd0mZztHXmqPc', 'qr2GqV4BneI0bESBEyal7B209grGImhZtQ8AYIOjRFm86LNJZEeEKXf2', 'SRMYAdDNssxbwaeKWybVYM875anYLy4ZL3UFqvfSMoSKNYSp0RoVO36G', 'm5OuSmSvZg0PfOr1iABaquK6xiw559C4ROulGyC0MM2Oliz7HrOOnKsQ', 'LiErNUxWAQGHZriT', 'CYjuVsYhgisqUsZ9', 'rBPgm1TQTCC52zd8', '_4YEUO6Dz4U184SJq', 'oMetrFt8H6kkgOML', 'UzuYfB9V9qbM5eu1' |
Source: W1FREE.exe, 6n54hoB8iZXb7Qvi3d5Ahe2R2a4iz0JjBSdIrbFzQ4yYn7BBxzWHhzUi.cs |
High entropy of concatenated method names: 'MGnFeT3WUePNZQMv3437ZKqY7hojUM0kctoYnLmaVQjYehPoKOlkqTwA', 'SETVYJuJCWjXnGf960cSswuTsBS52pj8PUP4W6e47HQiZCWzZSkGSlf6', 'GQZWVgEqqDyFnU1maWpzlWxwpO4xIKT3VlQnqd7uHe3z41nYK5YhvtET', 'W5PshI6C9ukuVqYoKZHmtXVNscb43SoHptocm3MgZ3svBCmtgjmwVKpq', 'tXoC4yYAldnHuZBesINSyKm71uliux1pLdZdTfKQr0j7JMp5VebGBGv7', 's4QvAGDWP1HM9ECQhSsy1UBkDWIGwtabHw44nzi63tTDOsm3EuraQFQa', 'qH3uGlGjI9Sd34aZvrc68cvg17hgAvm7m14yEIHPlr5Cq3t5INUNnTQG', 'CddG2dy6VNGghEP4YCMAd52S4XecTBOa1cuPzs1hW3VuoU9StsbQ5blG', 'z7rcpOFlQ3modWEEpDLR20DgL7FqJtFPNZ7z5NoTAu9poCXbs4l7zE9R', 'NytehDfXhaK9rYpU2GuCgbFax9dsPdnKi4lEmUmdeGPSdkrq4zBWiRNm' |
Source: W1FREE.exe, htj7fUSLQQK97C901WtrftmY.cs |
High entropy of concatenated method names: 'xopZST7ELXh3YP8gnZnCnaFi', 'WeJfjxRnS2Sjf47CMwNHwlro', 'dgjnJXGWpg4T4u2V432Es95x', 'TkbVwBYUn8KIg29GJAdG6cNW', 'ivHTOfvQpyKSYefxBE9aAz7Q', 'UOur1LYxR0GJa6xkO3t41w6p', 'BBgXntJCVHgdPagrWHRF4wz8', 'PmMiuVzIa0346MsdEkFZJ9Ib', 'U1TF64AUVmNK3VTHghw0a4lW', 'UR8JinKNdIxXrYzvctjy97xB' |
Source: W1FREE.exe, 3IpF7as7Q5ypJGArhFbS4vqg.cs |
High entropy of concatenated method names: 'n1gwRAflUanT86uOPQ1bMrDV', 'Dnb5TNc6c6vZYtTlgEW54llR', 'ZRyyZiiLcdnEzzEEUjxV48Bl', '_3MpveEuNJwh8swRAPCRrLkE3', 'lPVABD2nYnfnJa54sqv3ivGw', 'axp7mk8yk08JEfoffPgRzRoQQrFr0o6vqh3uUH3NoPqz7uEocrlSQtpL', '_2P5n0iD1s9mKOTCtEziZjIsYC2jCc0FecI4bQRDfjntvqGHhHVjPAGAE', 'xht5tNfOIcFjwt3IVheVHFgyge9kB0DUMC1UQZeqCvRXmtjPSOLHF8Gl', 'kKKmzu0XMc0dnPTDfUXr2kXrUT7LLIp5BFqakSgrzEQYYXoxp257PqGT', 'YtXK8WDxtVopS7mbfdsUJaxtzw2VbwgksCAkQRCMZVoWaouLexPrDH8T' |
Source: W1FREE.exe, aeb2vUhvoKPSctPnis29AiZnkul954D1FxQDUTPtu8VEAME42Q1uy0i9.cs |
High entropy of concatenated method names: 'INQd7GVpMr6hmJiSMFIhdupgZbGVB2WBs4HdrokFFOF1oZqC7dhVlUDk', 'OPFRRfuA4vBHlN59', 'lXNPGrhajeHjy0Lf', 'XalDw047YSvkHW5v', 'OdwrwORS2C5Xktjq' |
Source: W1FREE.exe, hCIvBsyFoejXxD1JkhVUXMOe.cs |
High entropy of concatenated method names: 'qHyr4ETbeUDkCSWxoVl0nnuK', 'W84JWrZQi8a1qILCmJEI5pOH', 'K1CpqllZmuykNbug24AgfAUa', 'bQ6rm6tcRey7WMfPsnzTKmpK', 'ShxWF6tArkG02XEcTI1StqEz', 'g7AGvBAwbulEvBVDrcw27I2v', '_895w1e5wVcdFJ4D2fDrqjC1O', 'oXHKmrbxXJWLu8U2CeGF73qp', 'vfGNkigj2jbtwDPv82ZXeXUp', 'qWgPMWtkj2qbN0hUC5UEGLNt' |
Source: system.exe.0.dr, rJQ9eU60npeq652Ibo7jvQRXM3rUdlYngpwbUMtxi.cs |
High entropy of concatenated method names: 'twi6K42bPTI4GYQ2n6IsgBa8hmZagm1U1c3lHShmH', 'pd60DaUs74BzskNbNT6A1gpuowjaPpKAFvmmHKmz6', 'WkiiAo4UsOuxoNgzFOBvuWbV5dZM8oJ6bdMBo9FqY', 'O61PK4T27e2ko0ux', 'do5cd0W2YtVxAzA4', 'iGn1249pBOkO0He2', 'x9uFtPMH24vwKfrD', 'kQ8Sq3SK06BRDWEf', 'mM658JXFajkwzrew', 'wGJghNiG7QBcQvgl' |
Source: system.exe.0.dr, 0jCpSn3TPAiA1lUmUeGqUs0q.cs |
High entropy of concatenated method names: 'APUhdyFM3p8VQO8im0tPPWLDrpUSVmeGxTqyG1xxF', 'dnrjiAuGSQBMv6SMkHl3Nen268nihLPPQb1vBIJp9', 'WwOJf0xn8ZQaqUpTM5sVgfMB45DIJSNdBLxdY8IbI', 'XZ4E5rO0tQ5oWB8DG6CjKvYLtgFYAgqXTFkNVKab8' |
Source: system.exe.0.dr, nCyWPpVLNarjz8xbfSRSEn60.cs |
High entropy of concatenated method names: 'Equals', 'GetHashCode', 'GetType', 'ToString', 'Create__Instance__', 'Dispose__Instance__', 'xhUg7OzetlYqccN2GXjWru6gaczDolrHBW2w6Q2Dx', 'aYRQG8twAkHNgK3B6VvdE9g2eriVfA27rnQjc6PYv', '_4O2M0VijjDsV91docL8dyBZn37l99A6yH8IOUOfUO', 'TAJhLWNIKRwhgBJMAngVKSaXns5T1WLXqvBIKy7T1' |
Source: system.exe.0.dr, MtWeevp3Ou6I0D9xZmY4TWpP.cs |
High entropy of concatenated method names: '_8cawZgo3hwxTF2OX1GlJKMe3', '_3HNkuljQi9I1KUd6Ok5x82gO', 'PvABkv8h23X1x3rqe2HfxzJY', 'agOZabpfCbyDM4Lal205i7Mr', '_6dcLdQh5gMgNAD4pGTnFP9Vl', 'SXbDnS14rMZU5U0wl2jhEfIX', 'iKYmL6S8wDSYECgCcDoE1uIp', 'S7wgpZ9xdM8DaOcDLCbLDoeo', 'BdFoWeM3p98ZWEOaVxdBioV7', 'CDiZ2FOgrQwwZSzeGksYL29R' |
Source: system.exe.0.dr, FuD0wDdNzpjleaHRPL2HVwuy4urGRNvot3Vq0xbZ2Sokj3t4TymJdGe9.cs |
High entropy of concatenated method names: 'QGT6IrhPmY39lxWGU1srAJf76HKcE9b0yeXVqU83PfjQd0mZztHXmqPc', 'qr2GqV4BneI0bESBEyal7B209grGImhZtQ8AYIOjRFm86LNJZEeEKXf2', 'SRMYAdDNssxbwaeKWybVYM875anYLy4ZL3UFqvfSMoSKNYSp0RoVO36G', 'm5OuSmSvZg0PfOr1iABaquK6xiw559C4ROulGyC0MM2Oliz7HrOOnKsQ', 'LiErNUxWAQGHZriT', 'CYjuVsYhgisqUsZ9', 'rBPgm1TQTCC52zd8', '_4YEUO6Dz4U184SJq', 'oMetrFt8H6kkgOML', 'UzuYfB9V9qbM5eu1' |
Source: system.exe.0.dr, 6n54hoB8iZXb7Qvi3d5Ahe2R2a4iz0JjBSdIrbFzQ4yYn7BBxzWHhzUi.cs |
High entropy of concatenated method names: 'MGnFeT3WUePNZQMv3437ZKqY7hojUM0kctoYnLmaVQjYehPoKOlkqTwA', 'SETVYJuJCWjXnGf960cSswuTsBS52pj8PUP4W6e47HQiZCWzZSkGSlf6', 'GQZWVgEqqDyFnU1maWpzlWxwpO4xIKT3VlQnqd7uHe3z41nYK5YhvtET', 'W5PshI6C9ukuVqYoKZHmtXVNscb43SoHptocm3MgZ3svBCmtgjmwVKpq', 'tXoC4yYAldnHuZBesINSyKm71uliux1pLdZdTfKQr0j7JMp5VebGBGv7', 's4QvAGDWP1HM9ECQhSsy1UBkDWIGwtabHw44nzi63tTDOsm3EuraQFQa', 'qH3uGlGjI9Sd34aZvrc68cvg17hgAvm7m14yEIHPlr5Cq3t5INUNnTQG', 'CddG2dy6VNGghEP4YCMAd52S4XecTBOa1cuPzs1hW3VuoU9StsbQ5blG', 'z7rcpOFlQ3modWEEpDLR20DgL7FqJtFPNZ7z5NoTAu9poCXbs4l7zE9R', 'NytehDfXhaK9rYpU2GuCgbFax9dsPdnKi4lEmUmdeGPSdkrq4zBWiRNm' |
Source: system.exe.0.dr, htj7fUSLQQK97C901WtrftmY.cs |
High entropy of concatenated method names: 'xopZST7ELXh3YP8gnZnCnaFi', 'WeJfjxRnS2Sjf47CMwNHwlro', 'dgjnJXGWpg4T4u2V432Es95x', 'TkbVwBYUn8KIg29GJAdG6cNW', 'ivHTOfvQpyKSYefxBE9aAz7Q', 'UOur1LYxR0GJa6xkO3t41w6p', 'BBgXntJCVHgdPagrWHRF4wz8', 'PmMiuVzIa0346MsdEkFZJ9Ib', 'U1TF64AUVmNK3VTHghw0a4lW', 'UR8JinKNdIxXrYzvctjy97xB' |
Source: system.exe.0.dr, 3IpF7as7Q5ypJGArhFbS4vqg.cs |
High entropy of concatenated method names: 'n1gwRAflUanT86uOPQ1bMrDV', 'Dnb5TNc6c6vZYtTlgEW54llR', 'ZRyyZiiLcdnEzzEEUjxV48Bl', '_3MpveEuNJwh8swRAPCRrLkE3', 'lPVABD2nYnfnJa54sqv3ivGw', 'axp7mk8yk08JEfoffPgRzRoQQrFr0o6vqh3uUH3NoPqz7uEocrlSQtpL', '_2P5n0iD1s9mKOTCtEziZjIsYC2jCc0FecI4bQRDfjntvqGHhHVjPAGAE', 'xht5tNfOIcFjwt3IVheVHFgyge9kB0DUMC1UQZeqCvRXmtjPSOLHF8Gl', 'kKKmzu0XMc0dnPTDfUXr2kXrUT7LLIp5BFqakSgrzEQYYXoxp257PqGT', 'YtXK8WDxtVopS7mbfdsUJaxtzw2VbwgksCAkQRCMZVoWaouLexPrDH8T' |
Source: system.exe.0.dr, aeb2vUhvoKPSctPnis29AiZnkul954D1FxQDUTPtu8VEAME42Q1uy0i9.cs |
High entropy of concatenated method names: 'INQd7GVpMr6hmJiSMFIhdupgZbGVB2WBs4HdrokFFOF1oZqC7dhVlUDk', 'OPFRRfuA4vBHlN59', 'lXNPGrhajeHjy0Lf', 'XalDw047YSvkHW5v', 'OdwrwORS2C5Xktjq' |
Source: system.exe.0.dr, hCIvBsyFoejXxD1JkhVUXMOe.cs |
High entropy of concatenated method names: 'qHyr4ETbeUDkCSWxoVl0nnuK', 'W84JWrZQi8a1qILCmJEI5pOH', 'K1CpqllZmuykNbug24AgfAUa', 'bQ6rm6tcRey7WMfPsnzTKmpK', 'ShxWF6tArkG02XEcTI1StqEz', 'g7AGvBAwbulEvBVDrcw27I2v', '_895w1e5wVcdFJ4D2fDrqjC1O', 'oXHKmrbxXJWLu8U2CeGF73qp', 'vfGNkigj2jbtwDPv82ZXeXUp', 'qWgPMWtkj2qbN0hUC5UEGLNt' |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
Process information set: NOOPENFILEERRORBOX |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: unknown FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: unknown FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: unknown FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: unknown FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: unknown FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: unknown FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: unknown FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: unknown FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: unknown FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: unknown FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
File Volume queried: unknown FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
File Volume queried: C:\ FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\AppData\Roaming\system.exe |
File Volume queried: unknown FullSizeInformation |
Jump to behavior |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |
Source: C:\Users\user\Desktop\W1FREE.exe |
WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct |