Analysis
-
max time kernel
151s -
max time network
44s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
24-11-2022 00:36
Behavioral task
behavioral1
Sample
16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe
Resource
win10v2004-20220901-en
General
-
Target
16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe
-
Size
76KB
-
MD5
540a027298b39dadbc3ad08c8ac2e316
-
SHA1
5c3b19943210209fabbc7b5a43b30686c154b159
-
SHA256
16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
-
SHA512
cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
SSDEEP
1536:bpvF99rQswQ25+9Pn9tbfoBQy6XKEYo8+uHOdRdSBuGJOgm:9vN8VQ/nn06hvSHmdFGJW
Malware Config
Signatures
-
Drops file in Drivers directory 64 IoCs
Processes:
16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exedescription ioc process File created C:\Windows\SysWOW64\drivers\TXP1atform.exe 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File created C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe File opened for modification C:\Windows\SysWOW64\drivers\TXP1atform.exe TXP1atform.exe -
Executes dropped EXE 64 IoCs
Processes:
TXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exepid process 836 TXP1atform.exe 1320 TXP1atform.exe 1220 TXP1atform.exe 2036 TXP1atform.exe 1800 TXP1atform.exe 280 TXP1atform.exe 1408 TXP1atform.exe 1172 TXP1atform.exe 844 TXP1atform.exe 1624 TXP1atform.exe 1960 TXP1atform.exe 832 TXP1atform.exe 1728 TXP1atform.exe 1520 TXP1atform.exe 1608 TXP1atform.exe 2044 TXP1atform.exe 984 TXP1atform.exe 1640 TXP1atform.exe 1584 TXP1atform.exe 1444 TXP1atform.exe 1832 TXP1atform.exe 1820 TXP1atform.exe 1836 TXP1atform.exe 1824 TXP1atform.exe 1220 TXP1atform.exe 580 TXP1atform.exe 1364 TXP1atform.exe 1800 TXP1atform.exe 1604 TXP1atform.exe 1504 TXP1atform.exe 568 TXP1atform.exe 1572 TXP1atform.exe 1972 TXP1atform.exe 844 TXP1atform.exe 1772 TXP1atform.exe 1472 TXP1atform.exe 1140 TXP1atform.exe 1736 TXP1atform.exe 1660 TXP1atform.exe 1540 TXP1atform.exe 1500 TXP1atform.exe 1580 TXP1atform.exe 1600 TXP1atform.exe 880 TXP1atform.exe 1368 TXP1atform.exe 1692 TXP1atform.exe 2028 TXP1atform.exe 1108 TXP1atform.exe 1324 TXP1atform.exe 1444 TXP1atform.exe 1320 TXP1atform.exe 596 TXP1atform.exe 876 TXP1atform.exe 576 TXP1atform.exe 1020 TXP1atform.exe 1012 TXP1atform.exe 1620 TXP1atform.exe 616 TXP1atform.exe 1192 TXP1atform.exe 804 TXP1atform.exe 1260 TXP1atform.exe 1400 TXP1atform.exe 1528 TXP1atform.exe 1624 TXP1atform.exe -
Sets file execution options in registry 2 TTPs 13 IoCs
Processes:
16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exedescription ioc process Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DLLNXOPTIONS 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GOOGLEUPDATE.EXE 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GROOVE.EXE 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\IE4UINIT.EXE 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ACCICONS.EXE 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CLVIEW.EXE 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CNFNOT32.EXE 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\EXCELCNV.EXE 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\EXTEXPORT.EXE 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GRAPH.EXE 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DW20.EXE 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DWTRIG20.EXE 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\EXCEL.EXE 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe -
Processes:
resource yara_rule \Windows\SysWOW64\drivers\TXP1atform.exe upx C:\Windows\SysWOW64\drivers\TXP1atform.exe upx \Windows\SysWOW64\drivers\TXP1atform.exe upx C:\Windows\SysWOW64\drivers\TXP1atform.exe upx behavioral1/memory/1044-61-0x0000000000400000-0x000000000044A000-memory.dmp upx behavioral1/memory/836-63-0x0000000000400000-0x000000000044A000-memory.dmp upx \Windows\SysWOW64\drivers\TXP1atform.exe upx \Windows\SysWOW64\drivers\TXP1atform.exe upx C:\Windows\SysWOW64\drivers\TXP1atform.exe upx behavioral1/memory/836-69-0x0000000000400000-0x000000000044A000-memory.dmp upx \Windows\SysWOW64\drivers\TXP1atform.exe upx \Windows\SysWOW64\drivers\TXP1atform.exe upx C:\Windows\SysWOW64\drivers\TXP1atform.exe upx behavioral1/memory/1320-75-0x0000000000400000-0x000000000044A000-memory.dmp upx behavioral1/memory/1220-76-0x0000000000400000-0x000000000044A000-memory.dmp upx \Windows\SysWOW64\drivers\TXP1atform.exe upx \Windows\SysWOW64\drivers\TXP1atform.exe upx C:\Windows\SysWOW64\drivers\TXP1atform.exe upx behavioral1/memory/1220-82-0x0000000000400000-0x000000000044A000-memory.dmp upx behavioral1/memory/2036-83-0x0000000000400000-0x000000000044A000-memory.dmp upx \Windows\SysWOW64\drivers\TXP1atform.exe upx \Windows\SysWOW64\drivers\TXP1atform.exe upx C:\Windows\SysWOW64\drivers\TXP1atform.exe upx behavioral1/memory/2036-89-0x0000000000400000-0x000000000044A000-memory.dmp upx \Windows\SysWOW64\drivers\TXP1atform.exe upx \Windows\SysWOW64\drivers\TXP1atform.exe upx C:\Windows\SysWOW64\drivers\TXP1atform.exe upx behavioral1/memory/1800-95-0x0000000000400000-0x000000000044A000-memory.dmp upx behavioral1/memory/280-96-0x0000000000400000-0x000000000044A000-memory.dmp upx \Windows\SysWOW64\drivers\TXP1atform.exe upx \Windows\SysWOW64\drivers\TXP1atform.exe upx C:\Windows\SysWOW64\drivers\TXP1atform.exe upx behavioral1/memory/280-102-0x0000000000400000-0x000000000044A000-memory.dmp upx \Windows\SysWOW64\drivers\TXP1atform.exe upx \Windows\SysWOW64\drivers\TXP1atform.exe upx C:\Windows\SysWOW64\drivers\TXP1atform.exe upx behavioral1/memory/1408-108-0x0000000000400000-0x000000000044A000-memory.dmp upx behavioral1/memory/1172-109-0x0000000000400000-0x000000000044A000-memory.dmp upx \Windows\SysWOW64\drivers\TXP1atform.exe upx \Windows\SysWOW64\drivers\TXP1atform.exe upx C:\Windows\SysWOW64\drivers\TXP1atform.exe upx behavioral1/memory/1172-115-0x0000000000400000-0x000000000044A000-memory.dmp upx \Windows\SysWOW64\drivers\TXP1atform.exe upx \Windows\SysWOW64\drivers\TXP1atform.exe upx C:\Windows\SysWOW64\drivers\TXP1atform.exe upx behavioral1/memory/844-121-0x0000000000400000-0x000000000044A000-memory.dmp upx behavioral1/memory/1624-122-0x0000000000400000-0x000000000044A000-memory.dmp upx \Windows\SysWOW64\drivers\TXP1atform.exe upx \Windows\SysWOW64\drivers\TXP1atform.exe upx C:\Windows\SysWOW64\drivers\TXP1atform.exe upx behavioral1/memory/1624-128-0x0000000000400000-0x000000000044A000-memory.dmp upx \Windows\SysWOW64\drivers\TXP1atform.exe upx \Windows\SysWOW64\drivers\TXP1atform.exe upx C:\Windows\SysWOW64\drivers\TXP1atform.exe upx behavioral1/memory/1960-134-0x0000000000400000-0x000000000044A000-memory.dmp upx behavioral1/memory/832-135-0x0000000000400000-0x000000000044A000-memory.dmp upx \Windows\SysWOW64\drivers\TXP1atform.exe upx \Windows\SysWOW64\drivers\TXP1atform.exe upx C:\Windows\SysWOW64\drivers\TXP1atform.exe upx behavioral1/memory/832-141-0x0000000000400000-0x000000000044A000-memory.dmp upx \Windows\SysWOW64\drivers\TXP1atform.exe upx \Windows\SysWOW64\drivers\TXP1atform.exe upx C:\Windows\SysWOW64\drivers\TXP1atform.exe upx behavioral1/memory/1728-147-0x0000000000400000-0x000000000044A000-memory.dmp upx -
Loads dropped DLL 64 IoCs
Processes:
16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exepid process 1044 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe 1044 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe 836 TXP1atform.exe 836 TXP1atform.exe 1320 TXP1atform.exe 1320 TXP1atform.exe 1220 TXP1atform.exe 1220 TXP1atform.exe 2036 TXP1atform.exe 2036 TXP1atform.exe 1800 TXP1atform.exe 1800 TXP1atform.exe 280 TXP1atform.exe 280 TXP1atform.exe 1408 TXP1atform.exe 1408 TXP1atform.exe 1172 TXP1atform.exe 1172 TXP1atform.exe 844 TXP1atform.exe 844 TXP1atform.exe 1624 TXP1atform.exe 1624 TXP1atform.exe 1960 TXP1atform.exe 1960 TXP1atform.exe 832 TXP1atform.exe 832 TXP1atform.exe 1728 TXP1atform.exe 1728 TXP1atform.exe 1520 TXP1atform.exe 1520 TXP1atform.exe 1608 TXP1atform.exe 1608 TXP1atform.exe 2044 TXP1atform.exe 2044 TXP1atform.exe 984 TXP1atform.exe 984 TXP1atform.exe 1640 TXP1atform.exe 1640 TXP1atform.exe 1584 TXP1atform.exe 1584 TXP1atform.exe 1444 TXP1atform.exe 1444 TXP1atform.exe 1832 TXP1atform.exe 1832 TXP1atform.exe 1820 TXP1atform.exe 1820 TXP1atform.exe 1836 TXP1atform.exe 1836 TXP1atform.exe 1824 TXP1atform.exe 1824 TXP1atform.exe 1220 TXP1atform.exe 1220 TXP1atform.exe 580 TXP1atform.exe 580 TXP1atform.exe 1364 TXP1atform.exe 1364 TXP1atform.exe 1800 TXP1atform.exe 1800 TXP1atform.exe 1604 TXP1atform.exe 1604 TXP1atform.exe 1504 TXP1atform.exe 1504 TXP1atform.exe 568 TXP1atform.exe 568 TXP1atform.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
Processes:
16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exepid process 1044 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe 1044 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe 1044 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe 1044 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe 1044 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe 1044 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe 1044 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe 1044 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe 1044 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe 836 TXP1atform.exe 836 TXP1atform.exe 836 TXP1atform.exe 836 TXP1atform.exe 836 TXP1atform.exe 836 TXP1atform.exe 836 TXP1atform.exe 836 TXP1atform.exe 836 TXP1atform.exe 1320 TXP1atform.exe 1320 TXP1atform.exe 1320 TXP1atform.exe 1320 TXP1atform.exe 1320 TXP1atform.exe 1320 TXP1atform.exe 1320 TXP1atform.exe 1320 TXP1atform.exe 1320 TXP1atform.exe 1220 TXP1atform.exe 1220 TXP1atform.exe 1220 TXP1atform.exe 1220 TXP1atform.exe 1220 TXP1atform.exe 1220 TXP1atform.exe 1220 TXP1atform.exe 1220 TXP1atform.exe 1220 TXP1atform.exe 2036 TXP1atform.exe 2036 TXP1atform.exe 2036 TXP1atform.exe 2036 TXP1atform.exe 2036 TXP1atform.exe 2036 TXP1atform.exe 2036 TXP1atform.exe 2036 TXP1atform.exe 2036 TXP1atform.exe 1800 TXP1atform.exe 1800 TXP1atform.exe 1800 TXP1atform.exe 1800 TXP1atform.exe 1800 TXP1atform.exe 1800 TXP1atform.exe 1800 TXP1atform.exe 1800 TXP1atform.exe 1800 TXP1atform.exe 280 TXP1atform.exe 280 TXP1atform.exe 280 TXP1atform.exe 280 TXP1atform.exe 280 TXP1atform.exe 280 TXP1atform.exe 280 TXP1atform.exe 280 TXP1atform.exe 280 TXP1atform.exe 1408 TXP1atform.exe -
Suspicious use of WriteProcessMemory 64 IoCs
Processes:
16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exeTXP1atform.exedescription pid process target process PID 1044 wrote to memory of 836 1044 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe TXP1atform.exe PID 1044 wrote to memory of 836 1044 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe TXP1atform.exe PID 1044 wrote to memory of 836 1044 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe TXP1atform.exe PID 1044 wrote to memory of 836 1044 16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe TXP1atform.exe PID 836 wrote to memory of 1320 836 TXP1atform.exe TXP1atform.exe PID 836 wrote to memory of 1320 836 TXP1atform.exe TXP1atform.exe PID 836 wrote to memory of 1320 836 TXP1atform.exe TXP1atform.exe PID 836 wrote to memory of 1320 836 TXP1atform.exe TXP1atform.exe PID 1320 wrote to memory of 1220 1320 TXP1atform.exe TXP1atform.exe PID 1320 wrote to memory of 1220 1320 TXP1atform.exe TXP1atform.exe PID 1320 wrote to memory of 1220 1320 TXP1atform.exe TXP1atform.exe PID 1320 wrote to memory of 1220 1320 TXP1atform.exe TXP1atform.exe PID 1220 wrote to memory of 2036 1220 TXP1atform.exe TXP1atform.exe PID 1220 wrote to memory of 2036 1220 TXP1atform.exe TXP1atform.exe PID 1220 wrote to memory of 2036 1220 TXP1atform.exe TXP1atform.exe PID 1220 wrote to memory of 2036 1220 TXP1atform.exe TXP1atform.exe PID 2036 wrote to memory of 1800 2036 TXP1atform.exe TXP1atform.exe PID 2036 wrote to memory of 1800 2036 TXP1atform.exe TXP1atform.exe PID 2036 wrote to memory of 1800 2036 TXP1atform.exe TXP1atform.exe PID 2036 wrote to memory of 1800 2036 TXP1atform.exe TXP1atform.exe PID 1800 wrote to memory of 280 1800 TXP1atform.exe TXP1atform.exe PID 1800 wrote to memory of 280 1800 TXP1atform.exe TXP1atform.exe PID 1800 wrote to memory of 280 1800 TXP1atform.exe TXP1atform.exe PID 1800 wrote to memory of 280 1800 TXP1atform.exe TXP1atform.exe PID 280 wrote to memory of 1408 280 TXP1atform.exe TXP1atform.exe PID 280 wrote to memory of 1408 280 TXP1atform.exe TXP1atform.exe PID 280 wrote to memory of 1408 280 TXP1atform.exe TXP1atform.exe PID 280 wrote to memory of 1408 280 TXP1atform.exe TXP1atform.exe PID 1408 wrote to memory of 1172 1408 TXP1atform.exe TXP1atform.exe PID 1408 wrote to memory of 1172 1408 TXP1atform.exe TXP1atform.exe PID 1408 wrote to memory of 1172 1408 TXP1atform.exe TXP1atform.exe PID 1408 wrote to memory of 1172 1408 TXP1atform.exe TXP1atform.exe PID 1172 wrote to memory of 844 1172 TXP1atform.exe TXP1atform.exe PID 1172 wrote to memory of 844 1172 TXP1atform.exe TXP1atform.exe PID 1172 wrote to memory of 844 1172 TXP1atform.exe TXP1atform.exe PID 1172 wrote to memory of 844 1172 TXP1atform.exe TXP1atform.exe PID 844 wrote to memory of 1624 844 TXP1atform.exe TXP1atform.exe PID 844 wrote to memory of 1624 844 TXP1atform.exe TXP1atform.exe PID 844 wrote to memory of 1624 844 TXP1atform.exe TXP1atform.exe PID 844 wrote to memory of 1624 844 TXP1atform.exe TXP1atform.exe PID 1624 wrote to memory of 1960 1624 TXP1atform.exe TXP1atform.exe PID 1624 wrote to memory of 1960 1624 TXP1atform.exe TXP1atform.exe PID 1624 wrote to memory of 1960 1624 TXP1atform.exe TXP1atform.exe PID 1624 wrote to memory of 1960 1624 TXP1atform.exe TXP1atform.exe PID 1960 wrote to memory of 832 1960 TXP1atform.exe TXP1atform.exe PID 1960 wrote to memory of 832 1960 TXP1atform.exe TXP1atform.exe PID 1960 wrote to memory of 832 1960 TXP1atform.exe TXP1atform.exe PID 1960 wrote to memory of 832 1960 TXP1atform.exe TXP1atform.exe PID 832 wrote to memory of 1728 832 TXP1atform.exe TXP1atform.exe PID 832 wrote to memory of 1728 832 TXP1atform.exe TXP1atform.exe PID 832 wrote to memory of 1728 832 TXP1atform.exe TXP1atform.exe PID 832 wrote to memory of 1728 832 TXP1atform.exe TXP1atform.exe PID 1728 wrote to memory of 1520 1728 TXP1atform.exe TXP1atform.exe PID 1728 wrote to memory of 1520 1728 TXP1atform.exe TXP1atform.exe PID 1728 wrote to memory of 1520 1728 TXP1atform.exe TXP1atform.exe PID 1728 wrote to memory of 1520 1728 TXP1atform.exe TXP1atform.exe PID 1520 wrote to memory of 1608 1520 TXP1atform.exe TXP1atform.exe PID 1520 wrote to memory of 1608 1520 TXP1atform.exe TXP1atform.exe PID 1520 wrote to memory of 1608 1520 TXP1atform.exe TXP1atform.exe PID 1520 wrote to memory of 1608 1520 TXP1atform.exe TXP1atform.exe PID 1608 wrote to memory of 2044 1608 TXP1atform.exe TXP1atform.exe PID 1608 wrote to memory of 2044 1608 TXP1atform.exe TXP1atform.exe PID 1608 wrote to memory of 2044 1608 TXP1atform.exe TXP1atform.exe PID 1608 wrote to memory of 2044 1608 TXP1atform.exe TXP1atform.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe"C:\Users\Admin\AppData\Local\Temp\16a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93.exe"1⤵
- Drops file in Drivers directory
- Sets file execution options in registry
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe3⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe4⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe5⤵
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe6⤵
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe7⤵
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe8⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe9⤵
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe10⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe11⤵
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe12⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe13⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe14⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe15⤵
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe16⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe17⤵
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe18⤵
- Executes dropped EXE
- Loads dropped DLL
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe19⤵
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe20⤵
- Executes dropped EXE
- Loads dropped DLL
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe21⤵
- Executes dropped EXE
- Loads dropped DLL
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe22⤵
- Executes dropped EXE
- Loads dropped DLL
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe23⤵
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe24⤵
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe25⤵
- Executes dropped EXE
- Loads dropped DLL
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe26⤵
- Executes dropped EXE
- Loads dropped DLL
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe27⤵
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe28⤵
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe29⤵
- Executes dropped EXE
- Loads dropped DLL
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe30⤵
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe31⤵
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe32⤵
- Executes dropped EXE
- Loads dropped DLL
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe33⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe34⤵
- Drops file in Drivers directory
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe35⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe36⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe37⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe38⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe39⤵
- Drops file in Drivers directory
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe40⤵
- Drops file in Drivers directory
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe41⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe42⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe43⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe44⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe45⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe46⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe47⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe48⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe49⤵
- Drops file in Drivers directory
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe50⤵
- Drops file in Drivers directory
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe51⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe52⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe53⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe54⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe55⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe56⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe57⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe58⤵
- Drops file in Drivers directory
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe59⤵
- Drops file in Drivers directory
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe60⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe61⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe62⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe63⤵
- Drops file in Drivers directory
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe64⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe65⤵
- Drops file in Drivers directory
- Executes dropped EXE
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe66⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe67⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe68⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe69⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe70⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe71⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe72⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe73⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe74⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe75⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe76⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe77⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe78⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe79⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe80⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe81⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe82⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe83⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe84⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe85⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe86⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe87⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe88⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe89⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe90⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe91⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe92⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe93⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe94⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe95⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe96⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe97⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe98⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe99⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe100⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe101⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe102⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe103⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe104⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe105⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe106⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe107⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe108⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe109⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe110⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe111⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe112⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe113⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe114⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe115⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe116⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe117⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe118⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe119⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe120⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe121⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe122⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe123⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe124⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe125⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe126⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe127⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe128⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe129⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe130⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe131⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe132⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe133⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe134⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe135⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe136⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe137⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe138⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe139⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe140⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe141⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe142⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe143⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe144⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe145⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe146⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe147⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe148⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe149⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe150⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe151⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe152⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe153⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe154⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe155⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe156⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe157⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe158⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe159⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe160⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe161⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe162⤵
- Drops file in Drivers directory
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe163⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe164⤵
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeC:\Windows\system32\drivers\TXP1atform.exe165⤵
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
C:\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
\Windows\SysWOW64\drivers\TXP1atform.exeFilesize
76KB
MD5540a027298b39dadbc3ad08c8ac2e316
SHA15c3b19943210209fabbc7b5a43b30686c154b159
SHA25616a64331e1f07f8cbbb6fbe973b978d4d79be2d8b3f11f8eeeb8c8a3e4f52e93
SHA512cf887fa8f9e6b0aa0f2e8a366747262c98557247373649a60a4eace7bf66db2d46b360e51a9d287aa560cf0b56337d606b571339949ec7a63488dceca69388d3
-
memory/280-96-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/280-92-0x0000000000000000-mapping.dmp
-
memory/280-102-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/568-226-0x0000000000000000-mapping.dmp
-
memory/568-232-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/568-229-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/576-308-0x0000000000000000-mapping.dmp
-
memory/580-209-0x0000000000000000-mapping.dmp
-
memory/580-214-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/596-301-0x0000000000000000-mapping.dmp
-
memory/616-322-0x0000000000000000-mapping.dmp
-
memory/804-329-0x0000000000000000-mapping.dmp
-
memory/832-135-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/832-141-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/832-131-0x0000000000000000-mapping.dmp
-
memory/836-69-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/836-63-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/836-57-0x0000000000000000-mapping.dmp
-
memory/844-112-0x0000000000000000-mapping.dmp
-
memory/844-237-0x0000000000000000-mapping.dmp
-
memory/844-242-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/844-121-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/876-305-0x0000000000000000-mapping.dmp
-
memory/880-272-0x0000000000000000-mapping.dmp
-
memory/984-164-0x0000000000000000-mapping.dmp
-
memory/984-173-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1012-315-0x0000000000000000-mapping.dmp
-
memory/1020-312-0x0000000000000000-mapping.dmp
-
memory/1044-54-0x0000000075071000-0x0000000075073000-memory.dmpFilesize
8KB
-
memory/1044-62-0x00000000003B0000-0x00000000003FA000-memory.dmpFilesize
296KB
-
memory/1044-61-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1108-287-0x0000000000000000-mapping.dmp
-
memory/1140-253-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1140-250-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1140-247-0x0000000000000000-mapping.dmp
-
memory/1172-105-0x0000000000000000-mapping.dmp
-
memory/1172-115-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1172-109-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1192-326-0x0000000000000000-mapping.dmp
-
memory/1220-205-0x0000000000000000-mapping.dmp
-
memory/1220-76-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1220-208-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1220-72-0x0000000000000000-mapping.dmp
-
memory/1220-211-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1220-82-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1260-333-0x0000000000000000-mapping.dmp
-
memory/1320-66-0x0000000000000000-mapping.dmp
-
memory/1320-298-0x0000000000000000-mapping.dmp
-
memory/1320-75-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1324-290-0x0000000000000000-mapping.dmp
-
memory/1364-218-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1364-215-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1364-212-0x0000000000000000-mapping.dmp
-
memory/1368-275-0x0000000000000000-mapping.dmp
-
memory/1400-336-0x0000000000000000-mapping.dmp
-
memory/1408-99-0x0000000000000000-mapping.dmp
-
memory/1408-108-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1444-187-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1444-183-0x0000000000000000-mapping.dmp
-
memory/1444-294-0x0000000000000000-mapping.dmp
-
memory/1444-193-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1472-249-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1472-244-0x0000000000000000-mapping.dmp
-
memory/1500-264-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1500-261-0x0000000000000000-mapping.dmp
-
memory/1504-228-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1504-223-0x0000000000000000-mapping.dmp
-
memory/1520-144-0x0000000000000000-mapping.dmp
-
memory/1520-154-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1520-148-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1528-340-0x0000000000000000-mapping.dmp
-
memory/1540-263-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1540-258-0x0000000000000000-mapping.dmp
-
memory/1572-230-0x0000000000000000-mapping.dmp
-
memory/1572-235-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1580-265-0x0000000000000000-mapping.dmp
-
memory/1584-186-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1584-177-0x0000000000000000-mapping.dmp
-
memory/1600-268-0x0000000000000000-mapping.dmp
-
memory/1604-219-0x0000000000000000-mapping.dmp
-
memory/1604-225-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1604-222-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1608-151-0x0000000000000000-mapping.dmp
-
memory/1608-160-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1620-319-0x0000000000000000-mapping.dmp
-
memory/1624-343-0x0000000000000000-mapping.dmp
-
memory/1624-128-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1624-122-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1624-118-0x0000000000000000-mapping.dmp
-
memory/1640-170-0x0000000000000000-mapping.dmp
-
memory/1640-174-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1640-180-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1660-260-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1660-254-0x0000000000000000-mapping.dmp
-
memory/1660-257-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1692-279-0x0000000000000000-mapping.dmp
-
memory/1728-138-0x0000000000000000-mapping.dmp
-
memory/1728-147-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1736-251-0x0000000000000000-mapping.dmp
-
memory/1736-256-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1772-246-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1772-240-0x0000000000000000-mapping.dmp
-
memory/1772-243-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1800-86-0x0000000000000000-mapping.dmp
-
memory/1800-216-0x0000000000000000-mapping.dmp
-
memory/1800-221-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1800-95-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1820-194-0x0000000000000000-mapping.dmp
-
memory/1820-200-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1820-197-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1824-207-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1824-202-0x0000000000000000-mapping.dmp
-
memory/1832-196-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1832-190-0x0000000000000000-mapping.dmp
-
memory/1836-204-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1836-198-0x0000000000000000-mapping.dmp
-
memory/1836-201-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1960-125-0x0000000000000000-mapping.dmp
-
memory/1960-134-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1972-239-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/1972-233-0x0000000000000000-mapping.dmp
-
memory/1972-236-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/2028-282-0x0000000000000000-mapping.dmp
-
memory/2036-89-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/2036-83-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/2036-79-0x0000000000000000-mapping.dmp
-
memory/2044-161-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/2044-167-0x0000000000400000-0x000000000044A000-memory.dmpFilesize
296KB
-
memory/2044-157-0x0000000000000000-mapping.dmp