f06c8c60be25cb5af2789421dcdf8c0de4de8f018cdf7992f8aca4a86d63d8a1

Analysis

max time kernel
92s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 16:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
f06c8c60be25cb5af2789421dcdf8c0de4de8f018cdf7992f8aca4a86d63d8a1.exe
Size 161KB
Sample221201-tpwavaeh56
SHA256 f06c8c60be25cb5af2789421dcdf8c0de4de8f018cdf7992f8aca4a86d63d8a1
MD5 a2e25afa2b05e454e7b85bcce7abafc6
SHA1 30c1fc59323ab146946f96ead3c2fdd9f692bccb
SHA512 5d56166d6b347250166773bb3cb3ac74f4b12b2c0e75ee2b5e5b9003eb7444102e3ae1d293f5d0cb91e96d2084f8fda7c61a8616c5d25fdf3662e67537652b58
SSDEEP 3072:baGdoNmae8XFEWxp5o6P7VIsICtbpGMtHndh5Hz:WxJJFEWv57ZIFCtbpGGndz
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

persistence

Malware Config

Signatures

Modifies AppInit DLL entries 2 TTPs
persistence

Registry Run Keys / Startup Folder
T1060

Modify Registry
T1112

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2891029575-1462575-1165213807-1000\Control Panel\International\Geo\Nation	f06c8c60be25cb5af2789421dcdf8c0de4de8f018cdf7992f8aca4a86d63d8a1.exe

Loads dropped DLL 64 IoCs

pid	Process
740	f06c8c60be25cb5af2789421dcdf8c0de4de8f018cdf7992f8aca4a86d63d8a1.exe
4576	WerFault.exe
1092	WerFault.exe
2080	WerFault.exe
2892	WerFault.exe
4656	WerFault.exe
2000	WerFault.exe
116	WerFault.exe
1144	WerFault.exe
3960	WerFault.exe
1808	WerFault.exe
3628	WerFault.exe
3440	WerFault.exe
3524	WerFault.exe
4080	WerFault.exe
4136	WerFault.exe
3948	WerFault.exe
3428	WerFault.exe
3368	WerFault.exe
816	WerFault.exe
2264	WerFault.exe
3836	WerFault.exe
3720	WerFault.exe
2352	WerFault.exe
1592	WerFault.exe
2292	WerFault.exe
5104	WerFault.exe
1060	WerFault.exe
3316	WerFault.exe
3040	WerFault.exe
4960	WerFault.exe
3804	WerFault.exe
2864	WerFault.exe
4160	WerFault.exe
3208	WerFault.exe
3356	WerFault.exe
1636	WerFault.exe
3436	WerFault.exe
4836	WerFault.exe
4668	WerFault.exe
4448	WerFault.exe
1212	WerFault.exe
1944	WerFault.exe
1728	WerFault.exe
2668	WerFault.exe
4984	WerFault.exe
1248	WerFault.exe
3352	WerFault.exe
3096	WerFault.exe
2456	WerFault.exe
2344	WerFault.exe
4616	WerFault.exe
3160	WerFault.exe
4812	WerFault.exe
2092	WerFault.exe
2216	WerFault.exe
4728	WerFault.exe
1984	WerFault.exe
1584	WerFault.exe
4432	WerFault.exe
916	WerFault.exe
4360	WerFault.exe
924	WerFault.exe
4776	WerFault.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Program crash 4 IoCs

pid	pid_target	Process	procid_target
4040	924	WerFault.exe	144
5024	740	WerFault.exe	80
3192	740	WerFault.exe	80
3752	740	WerFault.exe	80

Runs .reg file with regedit 1 IoCs

pid	Process
4156	regedit.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
740	f06c8c60be25cb5af2789421dcdf8c0de4de8f018cdf7992f8aca4a86d63d8a1.exe
740	f06c8c60be25cb5af2789421dcdf8c0de4de8f018cdf7992f8aca4a86d63d8a1.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 740 wrote to memory of 2208	740	f06c8c60be25cb5af2789421dcdf8c0de4de8f018cdf7992f8aca4a86d63d8a1.exe	81
PID 740 wrote to memory of 2208	740	f06c8c60be25cb5af2789421dcdf8c0de4de8f018cdf7992f8aca4a86d63d8a1.exe	81
PID 740 wrote to memory of 2208	740	f06c8c60be25cb5af2789421dcdf8c0de4de8f018cdf7992f8aca4a86d63d8a1.exe	81
PID 2208 wrote to memory of 4156	2208	regedt32.exe	82
PID 2208 wrote to memory of 4156	2208	regedt32.exe	82
PID 2208 wrote to memory of 4156	2208	regedt32.exe	82

C:\Users\Admin\AppData\Local\Temp\f06c8c60be25cb5af2789421dcdf8c0de4de8f018cdf7992f8aca4a86d63d8a1.exe
"C:\Users\Admin\AppData\Local\Temp\f06c8c60be25cb5af2789421dcdf8c0de4de8f018cdf7992f8aca4a86d63d8a1.exe"
1⤵
- Checks computer location settings
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:740
- C:\Windows\SysWOW64\regedt32.exe
  "C:\Windows\System32\regedt32.exe" /s "C:\Users\Admin\Documents\Iterra\T03emp03.reg"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2208
- - C:\Windows\SysWOW64\regedit.exe
    "C:\Windows\regedit.exe" /s "C:\Users\Admin\Documents\Iterra\T03emp03.reg"
    3⤵
    - Runs .reg file with regedit
    PID:4156
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 740 -s 588
  2⤵
  - Program crash
  PID:5024
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 740 -s 884
  2⤵
  - Program crash
  PID:3192
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 740 -s 576
  2⤵
  - Program crash
  PID:3752

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 740 -ip 740
1⤵
- Loads dropped DLL
PID:4576

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 4576 -ip 4576
1⤵
- Loads dropped DLL
PID:1092

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 1092 -ip 1092
1⤵
- Loads dropped DLL
PID:2080

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 2080 -ip 2080
1⤵
- Loads dropped DLL
PID:2892

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 2892 -ip 2892
1⤵
- Loads dropped DLL
PID:4656

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 4656 -ip 4656
1⤵
- Loads dropped DLL
PID:2000

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 560 -p 2000 -ip 2000
1⤵
- Loads dropped DLL
PID:116

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 576 -p 116 -ip 116
1⤵
- Loads dropped DLL
PID:1144

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 588 -p 1144 -ip 1144
1⤵
- Loads dropped DLL
PID:3960

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 3960 -ip 3960
1⤵
- Loads dropped DLL
PID:1808

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 1808 -ip 1808
1⤵
- Loads dropped DLL
PID:3628

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 3628 -ip 3628
1⤵
- Loads dropped DLL
PID:3440

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 3440 -ip 3440
1⤵
- Loads dropped DLL
PID:3524

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 668 -p 3524 -ip 3524
1⤵
- Loads dropped DLL
PID:4080

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 672 -p 4080 -ip 4080
1⤵
- Loads dropped DLL
PID:4136

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 704 -p 4136 -ip 4136
1⤵
- Loads dropped DLL
PID:3948

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 716 -p 3948 -ip 3948
1⤵
- Loads dropped DLL
PID:3428

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 736 -p 3428 -ip 3428
1⤵
- Loads dropped DLL
PID:3368

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 752 -p 3368 -ip 3368
1⤵
- Loads dropped DLL
PID:816

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 708 -p 816 -ip 816
1⤵
- Loads dropped DLL
PID:2264

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 2264 -ip 2264
1⤵
- Loads dropped DLL
PID:3836

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 800 -p 3836 -ip 3836
1⤵
- Loads dropped DLL
PID:3720

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 812 -p 3720 -ip 3720
1⤵
- Loads dropped DLL
PID:2352

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 832 -p 2352 -ip 2352
1⤵
- Loads dropped DLL
PID:1592

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 848 -p 1592 -ip 1592
1⤵
- Loads dropped DLL
PID:2292

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 804 -p 2292 -ip 2292
1⤵
- Loads dropped DLL
PID:5104

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 5104 -ip 5104
1⤵
- Loads dropped DLL
PID:1060

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 880 -p 1060 -ip 1060
1⤵
- Loads dropped DLL
PID:3316

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 912 -p 3316 -ip 3316
1⤵
- Loads dropped DLL
PID:3040

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 892 -p 3040 -ip 3040
1⤵
- Loads dropped DLL
PID:4960

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 944 -p 4960 -ip 4960
1⤵
- Loads dropped DLL
PID:3804

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 956 -p 3804 -ip 3804
1⤵
- Loads dropped DLL
PID:2864

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 976 -p 2864 -ip 2864
1⤵
- Loads dropped DLL
PID:4160

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 924 -p 4160 -ip 4160
1⤵
- Loads dropped DLL
PID:3208

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 988 -p 3208 -ip 3208
1⤵
- Loads dropped DLL
PID:3356

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1004 -p 3356 -ip 3356
1⤵
- Loads dropped DLL
PID:1636

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1020 -p 1636 -ip 1636
1⤵
- Loads dropped DLL
PID:3436

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1040 -p 3436 -ip 3436
1⤵
- Loads dropped DLL
PID:4836

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1064 -p 4836 -ip 4836
1⤵
- Loads dropped DLL
PID:4668

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1072 -p 4668 -ip 4668
1⤵
- Loads dropped DLL
PID:4448

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1088 -p 4448 -ip 4448
1⤵
- Loads dropped DLL
PID:1212

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1104 -p 1212 -ip 1212
1⤵
- Loads dropped DLL
PID:1944

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1120 -p 1944 -ip 1944
1⤵
- Loads dropped DLL
PID:1728

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1136 -p 1728 -ip 1728
1⤵
- Loads dropped DLL
PID:2668

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1152 -p 2668 -ip 2668
1⤵
- Loads dropped DLL
PID:4984

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1168 -p 4984 -ip 4984
1⤵
- Loads dropped DLL
PID:1248

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1184 -p 1248 -ip 1248
1⤵
- Loads dropped DLL
PID:3352

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1200 -p 3352 -ip 3352
1⤵
- Loads dropped DLL
PID:3096

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1228 -p 3096 -ip 3096
1⤵
- Loads dropped DLL
PID:2456

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1220 -p 2456 -ip 2456
1⤵
- Loads dropped DLL
PID:2344

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1248 -p 2344 -ip 2344
1⤵
- Loads dropped DLL
PID:4616

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1284 -p 4616 -ip 4616
1⤵
- Loads dropped DLL
PID:3160

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1264 -p 3160 -ip 3160
1⤵
- Loads dropped DLL
PID:4812

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1296 -p 4812 -ip 4812
1⤵
- Loads dropped DLL
PID:2092

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1320 -p 2092 -ip 2092
1⤵
- Loads dropped DLL
PID:2216

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1328 -p 2216 -ip 2216
1⤵
- Loads dropped DLL
PID:4728

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1348 -p 4728 -ip 4728
1⤵
- Loads dropped DLL
PID:1984

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1368 -p 1984 -ip 1984
1⤵
- Loads dropped DLL
PID:1584

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1376 -p 1584 -ip 1584
1⤵
- Loads dropped DLL
PID:4432

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1392 -p 4432 -ip 4432
1⤵
- Loads dropped DLL
PID:916

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1408 -p 916 -ip 916
1⤵
- Loads dropped DLL
PID:4360

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1424 -p 4360 -ip 4360
1⤵
- Loads dropped DLL
PID:924
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 924 -s 508
  2⤵
  - Program crash
  PID:4040

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1440 -p 924 -ip 924
1⤵
- Loads dropped DLL
PID:4776

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 836 -p 5024 -ip 5024
1⤵
PID:448

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 888 -p 448 -ip 448
1⤵
PID:3648

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 880 -p 3648 -ip 3648
1⤵
PID:4252

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1100 -p 4252 -ip 4252
1⤵
PID:4336

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4336 -ip 4336
1⤵
PID:4680

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 4680 -ip 4680
1⤵
PID:3752

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1092 -p 3752 -ip 3752
1⤵
PID:4580

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1160 -p 4580 -ip 4580
1⤵
PID:4156

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1180 -p 4156 -ip 4156
1⤵
PID:2416

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 2416 -ip 2416
1⤵
PID:208

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1168 -p 208 -ip 208
1⤵
PID:3544

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1444 -p 3544 -ip 3544
1⤵
PID:2064

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1464 -p 2064 -ip 2064
1⤵
PID:680

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 680 -ip 680
1⤵
PID:1044

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 556 -p 1044 -ip 1044
1⤵
PID:2968

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 592 -p 2968 -ip 2968
1⤵
PID:2692

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 2692 -ip 2692
1⤵
PID:4884

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 4884 -ip 4884
1⤵
PID:4524

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 680 -p 4524 -ip 4524
1⤵
PID:1536

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 696 -p 1536 -ip 1536
1⤵
PID:1296

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 1296 -ip 1296
1⤵
PID:4612

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 4612 -ip 4612
1⤵
PID:1936

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 716 -p 1936 -ip 1936
1⤵
PID:4388

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 712 -p 4388 -ip 4388
1⤵
PID:2972

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 732 -p 2972 -ip 2972
1⤵
PID:4268

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 756 -p 4268 -ip 4268
1⤵
PID:4036

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 740 -p 4036 -ip 4036
1⤵
PID:2744

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 780 -p 2744 -ip 2744
1⤵
PID:4360

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 788 -p 4360 -ip 4360
1⤵
PID:916

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 808 -p 916 -ip 916
1⤵
PID:3412

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 872 -p 3412 -ip 3412
1⤵
PID:4024

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 828 -p 4024 -ip 4024
1⤵
PID:1888

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 860 -p 1888 -ip 1888
1⤵
PID:4860

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 912 -p 4860 -ip 4860
1⤵
PID:4180

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 916 -p 4180 -ip 4180
1⤵
PID:2528

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 900 -p 2528 -ip 2528
1⤵
PID:4780

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 948 -p 4780 -ip 4780
1⤵
PID:4184

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 984 -p 4184 -ip 4184
1⤵
PID:4340

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 964 -p 4340 -ip 4340
1⤵
PID:1312

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 992 -p 1312 -ip 1312
1⤵
PID:4564

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1032 -p 4564 -ip 4564
1⤵
PID:1336

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1052 -p 1336 -ip 1336
1⤵
PID:3096

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1060 -p 3096 -ip 3096
1⤵
PID:3020

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1080 -p 3020 -ip 3020
1⤵
PID:4572

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1112 -p 4572 -ip 4572
1⤵
PID:1504

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1128 -p 1504 -ip 1504
1⤵
PID:3980

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1144 -p 3980 -ip 3980
1⤵
PID:1444

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1192 -p 1444 -ip 1444
1⤵
PID:1932

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1232 -p 1932 -ip 1932
1⤵
PID:4528

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1240 -p 4528 -ip 4528
1⤵
PID:384

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1200 -p 384 -ip 384
1⤵
PID:3052

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1260 -p 3052 -ip 3052
1⤵
PID:4836

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1288 -p 4836 -ip 4836
1⤵
PID:3436

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1264 -p 3436 -ip 3436
1⤵
PID:4752

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1308 -p 4752 -ip 4752
1⤵
PID:1964

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1340 -p 1964 -ip 1964
1⤵
PID:1972

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1320 -p 1972 -ip 1972
1⤵
PID:3476

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1360 -p 3476 -ip 3476
1⤵
PID:4320

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1364 -p 4320 -ip 4320
1⤵
PID:1340

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1384 -p 1340 -ip 1340
1⤵
PID:3220

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1400 -p 3220 -ip 3220
1⤵
PID:2460

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1416 -p 2460 -ip 2460
1⤵
PID:948

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1432 -p 948 -ip 948
1⤵
PID:3316

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 876 -p 740 -ip 740
1⤵
PID:1328

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 1328 -ip 1328
1⤵
PID:2400

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1016 -p 2400 -ip 2400
1⤵
PID:3720

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 396 -p 3720 -ip 3720
1⤵
PID:3836

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1096 -p 3836 -ip 3836
1⤵
PID:2264

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1100 -p 2264 -ip 2264
1⤵
PID:2168

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 500 -p 2168 -ip 2168
1⤵
PID:3368

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 3368 -ip 3368
1⤵
PID:4912

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 4912 -ip 4912
1⤵
PID:3948

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 3948 -ip 3948
1⤵
PID:3428

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 3428 -ip 3428
1⤵
PID:3620

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1428 -p 3620 -ip 3620
1⤵
PID:4056

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 4056 -ip 4056
1⤵
PID:3524

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 560 -p 3524 -ip 3524
1⤵
PID:2800

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 576 -p 2800 -ip 2800
1⤵
PID:2880

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1180 -p 2880 -ip 2880
1⤵
PID:1884

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 832 -p 1884 -ip 1884
1⤵
PID:1360

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 588 -p 1360 -ip 1360
1⤵
PID:2580

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 2580 -ip 2580
1⤵
PID:260

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 868 -p 260 -ip 260
1⤵
PID:1828

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 1828 -ip 1828
1⤵
PID:4420

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1056 -p 4420 -ip 4420
1⤵
PID:4264

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 660 -p 4264 -ip 4264
1⤵
PID:2508

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 2508 -ip 2508
1⤵
PID:632

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 668 -p 632 -ip 632
1⤵
PID:1160

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1108 -p 1160 -ip 1160
1⤵
PID:5004

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 5004 -ip 5004
1⤵
PID:3316

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1120 -p 3316 -ip 3316
1⤵
PID:948

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1136 -p 948 -ip 948
1⤵
PID:2460

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 712 -p 2460 -ip 2460
1⤵
PID:400

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1356 -p 400 -ip 400
1⤵
PID:1340

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 768 -p 1340 -ip 1340
1⤵
PID:4320

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1320 -p 4320 -ip 4320
1⤵
PID:3476

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 3476 -ip 3476
1⤵
PID:1972

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 780 -p 1972 -ip 1972
1⤵
PID:3356

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 788 -p 3356 -ip 3356
1⤵
PID:4752

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 828 -p 4752 -ip 4752
1⤵
PID:4880

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 860 -p 4880 -ip 4880
1⤵
PID:3332

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 952 -p 3332 -ip 3332
1⤵
PID:3852

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 956 -p 3852 -ip 3852
1⤵
PID:4740

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 980 -p 4740 -ip 4740
1⤵
PID:4620

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 972 -p 4620 -ip 4620
1⤵
PID:4528

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 924 -p 4528 -ip 4528
1⤵
PID:1532

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 964 -p 1532 -ip 1532
1⤵
PID:1444

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1068 -p 1444 -ip 1444
1⤵
PID:4148

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1060 -p 4148 -ip 4148
1⤵
PID:4028

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1076 -p 4028 -ip 4028
1⤵
PID:3056

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1172 -p 3056 -ip 3056
1⤵
PID:3352

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1188 -p 3352 -ip 3352
1⤵
PID:2164

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1236 -p 2164 -ip 2164
1⤵
PID:2456

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1048 -p 2456 -ip 2456
1⤵
PID:2364

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1200 -p 2364 -ip 2364
1⤵
PID:4616

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1276 -p 4616 -ip 4616
1⤵
PID:5068

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1284 -p 5068 -ip 5068
1⤵
PID:4812

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1204 -p 4812 -ip 4812
1⤵
PID:2092

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1052 -p 2092 -ip 2092
1⤵
PID:4676

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1340 -p 4676 -ip 4676
1⤵
PID:4728

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1360 -p 4728 -ip 4728
1⤵
PID:1000

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1364 -p 1000 -ip 1000
1⤵
PID:2368

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1384 -p 2368 -ip 2368
1⤵
PID:4432

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1272 -p 4432 -ip 4432
1⤵
PID:4040

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1400 -p 4040 -ip 4040
1⤵
PID:916

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1424 -p 916 -ip 916
1⤵
PID:2340

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3192 -ip 3192
1⤵
PID:4716

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 820 -p 4716 -ip 4716
1⤵
PID:1304

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 1304 -ip 1304
1⤵
PID:4588

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 396 -p 4588 -ip 4588
1⤵
PID:1300

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1096 -p 1300 -ip 1300
1⤵
PID:996

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 996 -ip 996
1⤵
PID:1456

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1100 -p 1456 -ip 1456
1⤵
PID:2512

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1088 -p 2512 -ip 2512
1⤵
PID:3796

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 3796 -ip 3796
1⤵
PID:2588

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 2588 -ip 2588
1⤵
PID:1556

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 1556 -ip 1556
1⤵
PID:5020

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 5020 -ip 5020
1⤵
PID:3432

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 548 -p 3432 -ip 3432
1⤵
PID:3684

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 3684 -ip 3684
1⤵
PID:1732

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 1732 -ip 1732
1⤵
PID:4816

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 988 -p 4816 -ip 4816
1⤵
PID:308

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 308 -ip 308
1⤵
PID:4584

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1028 -p 4584 -ip 4584
1⤵
PID:1696

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 792 -p 1696 -ip 1696
1⤵
PID:1752

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 856 -p 1752 -ip 1752
1⤵
PID:4688

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1460 -p 4688 -ip 4688
1⤵
PID:4204

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1068 -p 4204 -ip 4204
1⤵
PID:4940

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 676 -p 4940 -ip 4940
1⤵
PID:4708

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 672 -p 4708 -ip 4708
1⤵
PID:4772

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 684 -p 4772 -ip 4772
1⤵
PID:3648

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 728 -p 3648 -ip 3648
1⤵
PID:4016

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 720 -p 4016 -ip 4016
1⤵
PID:1776

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 1776 -ip 1776
1⤵
PID:4592

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1032 -p 4592 -ip 4592
1⤵
PID:1760

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 736 -p 1760 -ip 1760
1⤵
PID:2096

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1124 -p 2096 -ip 2096
1⤵
PID:1056

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 748 -p 1056 -ip 1056
1⤵
PID:744

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 752 -p 744 -ip 744
1⤵
PID:2368

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 756 -p 2368 -ip 2368
1⤵
PID:1000

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 776 -p 1000 -ip 1000
1⤵
PID:5036

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 800 -p 5036 -ip 5036
1⤵
PID:4728

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 812 -p 4728 -ip 4728
1⤵
PID:2092

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 2092 -ip 2092
1⤵
PID:4812

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 896 -p 4812 -ip 4812
1⤵
PID:1908

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 1908 -ip 1908
1⤵
PID:2304

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 944 -p 2304 -ip 2304
1⤵
PID:3172

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 3172 -ip 3172
1⤵
PID:1336

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 940 -p 1336 -ip 1336
1⤵
PID:2384

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 960 -p 2384 -ip 2384
1⤵
PID:2976

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 996 -p 2976 -ip 2976
1⤵
PID:2936

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1008 -p 2936 -ip 2936
1⤵
PID:4984

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1116 -p 4984 -ip 4984
1⤵
PID:1376

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1132 -p 1376 -ip 1376
1⤵
PID:2576

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1212 -p 2576 -ip 2576
1⤵
PID:2496

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1036 -p 2496 -ip 2496
1⤵
PID:1212

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1244 -p 1212 -ip 1212
1⤵
PID:4300

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1188 -p 4300 -ip 4300
1⤵
PID:4668

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1248 -p 4668 -ip 4668
1⤵
PID:4740

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1280 -p 4740 -ip 4740
1⤵
PID:4324

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1312 -p 4324 -ip 4324
1⤵
PID:3704

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1264 -p 3704 -ip 3704
1⤵
PID:1636

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1372 -p 1636 -ip 1636
1⤵
PID:4412

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1296 -p 4412 -ip 4412
1⤵
PID:2488

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1360 -p 2488 -ip 2488
1⤵
PID:4320

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1376 -p 4320 -ip 4320
1⤵
PID:3804

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1392 -p 3804 -ip 3804
1⤵
PID:4960

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1420 -p 4960 -ip 4960
1⤵
PID:3040

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1412 -p 3040 -ip 3040
1⤵
PID:4952

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 488 -p 740 -ip 740
1⤵
PID:5092

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1012 -p 5092 -ip 5092
1⤵
PID:316

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1160 -p 316 -ip 316
1⤵
PID:216

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 216 -ip 216
1⤵
PID:2580

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1016 -p 2580 -ip 2580
1⤵
PID:4532

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1176 -p 4532 -ip 4532
1⤵
PID:1360

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 500 -p 1360 -ip 1360
1⤵
PID:1940

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 1940 -ip 1940
1⤵
PID:2880

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 2880 -ip 2880
1⤵
PID:3708

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 3708 -ip 3708
1⤵
PID:3640

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 548 -p 3640 -ip 3640
1⤵
PID:3620

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 3620 -ip 3620
1⤵
PID:4472

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1492 -p 4472 -ip 4472
1⤵
PID:1356

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 1356 -ip 1356
1⤵
PID:4912

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 4912 -ip 4912
1⤵
PID:2104

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 556 -p 2104 -ip 2104
1⤵
PID:2168

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 688 -p 2168 -ip 2168
1⤵
PID:532

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 708 -p 532 -ip 532
1⤵
PID:3784

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 3784 -ip 3784
1⤵
PID:4968

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 4968 -ip 4968
1⤵
PID:1528

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1316 -p 1528 -ip 1528
1⤵
PID:1152

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 856 -p 1152 -ip 1152
1⤵
PID:4072

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 740 -p 4072 -ip 4072
1⤵
PID:1448

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 808 -p 1448 -ip 1448
1⤵
PID:2484

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 704 -p 2484 -ip 2484
1⤵
PID:3972

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 700 -p 3972 -ip 3972
1⤵
PID:3120

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 692 -p 3120 -ip 3120
1⤵
PID:4160

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 844 -p 4160 -ip 4160
1⤵
PID:1364

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 716 -p 1364 -ip 1364
1⤵
PID:1996

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 812 -p 1996 -ip 1996
1⤵
PID:3548

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1020 -p 3548 -ip 3548
1⤵
PID:4632

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 4632 -ip 4632
1⤵
PID:4048

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 920 -p 4048 -ip 4048
1⤵
PID:3852

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1120 -p 3852 -ip 3852
1⤵
PID:4668

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1304 -p 4668 -ip 4668
1⤵
PID:4300

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1144 -p 4300 -ip 4300
1⤵
PID:1212

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1344 -p 1212 -ip 1212
1⤵
PID:2496

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 976 -p 2496 -ip 2496
1⤵
PID:1444

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 848 -p 1444 -ip 1444
1⤵
PID:2576

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1224 -p 2576 -ip 2576
1⤵
PID:4984

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1236 -p 4984 -ip 4984
1⤵
PID:2936

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 904 -p 2936 -ip 2936
1⤵
PID:3352

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1300 -p 3352 -ip 3352
1⤵
PID:2976

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1324 -p 2976 -ip 2976
1⤵
PID:1432

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1364 -p 1432 -ip 1432
1⤵
PID:2332

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 968 -p 2332 -ip 2332
1⤵
PID:1336

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 940 -p 1336 -ip 1336
1⤵
PID:4340

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1376 -p 4340 -ip 4340
1⤵
PID:4972

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1308 -p 4972 -ip 4972
1⤵
PID:2092

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1064 -p 2092 -ip 2092
1⤵
PID:2544

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1044 -p 2544 -ip 2544
1⤵
PID:3416

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1212 -p 3416 -ip 3416
1⤵
PID:1000

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1080 -p 1000 -ip 1000
1⤵
PID:1900

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1192 -p 1900 -ip 1900
1⤵
PID:744

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1188 -p 744 -ip 744
1⤵
PID:3412

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1252 -p 3412 -ip 3412
1⤵
PID:3128

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1264 -p 3128 -ip 3128
1⤵
PID:2340

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1340 -p 2340 -ip 2340
1⤵
PID:1760

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1348 -p 1760 -ip 1760
1⤵
PID:4976

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1368 -p 4976 -ip 4976
1⤵
PID:2292

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1436 -p 2292 -ip 2292
1⤵
PID:620

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1416 -p 620 -ip 620
1⤵
PID:4772

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1400 -p 4772 -ip 4772
1⤵
PID:3656

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1524 -p 3656 -ip 3656
1⤵
PID:4336

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1012 -p 3752 -ip 3752
1⤵
PID:1516

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 1516 -ip 1516
1⤵
PID:4156

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 396 -p 4156 -ip 4156
1⤵
PID:2520

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 488 -p 2520 -ip 2520
1⤵
PID:208

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 208 -ip 208
1⤵
PID:664

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1176 -p 664 -ip 664
1⤵
PID:2064

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 500 -p 2064 -ip 2064
1⤵
PID:4272

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 4272 -ip 4272
1⤵
PID:3644

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 800 -p 3644 -ip 3644
1⤵
PID:2968

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 692 -p 2968 -ip 2968
1⤵
PID:2692

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 2692 -ip 2692
1⤵
PID:3260

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 3260 -ip 3260
1⤵
PID:1536

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1464 -p 1536 -ip 1536
1⤵
PID:3812

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1456 -p 3812 -ip 3812
1⤵
PID:4640

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 780 -p 4640 -ip 4640
1⤵
PID:4908

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1164 -p 4908 -ip 4908
1⤵
PID:1644

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 1644 -ip 1644
1⤵
PID:2972

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 572 -p 2972 -ip 2972
1⤵
PID:4768

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1196 -p 4768 -ip 4768
1⤵
PID:4332

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 756 -p 4332 -ip 4332
1⤵
PID:4848

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 676 -p 4848 -ip 4848
1⤵
PID:4268

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 4268 -ip 4268
1⤵
PID:3164

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 3164 -ip 3164
1⤵
PID:3176

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 960 -p 3176 -ip 3176
1⤵
PID:4944

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 4944 -ip 4944
1⤵
PID:4476

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1308 -p 4476 -ip 4476
1⤵
PID:448

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1052 -p 448 -ip 448
1⤵
PID:1420

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 1420 -ip 1420
1⤵
PID:1776

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1068 -p 1776 -ip 1776
1⤵
PID:4660

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 672 -p 4660 -ip 4660
1⤵
PID:2756

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 696 -p 2756 -ip 2756
1⤵
PID:4360

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 916 -p 4360 -ip 4360
1⤵
PID:3568

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 700 -p 3568 -ip 3568
1⤵
PID:2368

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 744 -p 2368 -ip 2368
1⤵
PID:4024

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 884 -p 4024 -ip 4024
1⤵
PID:5036

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 732 -p 5036 -ip 5036
1⤵
PID:4180

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1356 -p 4180 -ip 4180
1⤵
PID:3416

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1128 -p 3416 -ip 3416
1⤵
PID:4812

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 768 -p 4812 -ip 4812
1⤵
PID:2236

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 796 -p 2236 -ip 2236
1⤵
PID:1908

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 848 -p 1908 -ip 1908
1⤵
PID:4616

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1224 -p 4616 -ip 4616
1⤵
PID:2332

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1236 -p 2332 -ip 2332
1⤵
PID:2344

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 904 -p 2344 -ip 2344
1⤵
PID:2456

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 948 -p 2456 -ip 2456
1⤵
PID:3096

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1248 -p 3096 -ip 3096
1⤵
PID:1248

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1204 -p 1248 -ip 1248
1⤵
PID:3056

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 984 -p 3056 -ip 3056
1⤵
PID:4148

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1396 -p 4148 -ip 4148
1⤵
PID:3980

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1412 -p 3980 -ip 3980
1⤵
PID:1444

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1044 -p 1444 -ip 1444
1⤵
PID:1944

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 996 -p 1944 -ip 1944
1⤵
PID:1532

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1116 -p 1532 -ip 1532
1⤵
PID:4448

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1208 -p 4448 -ip 4448
1⤵
PID:4104

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1292 -p 4104 -ip 4104
1⤵
PID:4048

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1216 -p 4048 -ip 4048
1⤵
PID:4632

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1268 -p 4632 -ip 4632
1⤵
PID:1636

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1404 -p 1636 -ip 1636
1⤵
PID:3208

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1368 -p 3208 -ip 3208
1⤵
PID:1364

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1436 -p 1364 -ip 1364
1⤵
PID:4160

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1416 -p 4160 -ip 4160
1⤵
PID:3804

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1388 -p 3804 -ip 3804
1⤵
PID:3972

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

T03emp03.reg

Path C:\Users\Admin\Documents\Iterra\T03emp03.reg
Size 217B
SHA256 f6dcebe2bacbfe30b8284cdd207a193c1914ff0dbac244a9c4b39ded2431cb8c
MD5 3ae64c3426e903ec9bd4e4e18b67bf3b
SHA1 416efefd7c7f0bcd73a8bcf288692427bdfd2ddc
SHA512 083c0cb1bf547130de6a2495e24c735ecc478bd86068a3baeaf3a480e3f51158d0d457b8e806c0f67fef27f25750969f838f447e6165c1b0673d499e0aaab8ec
MD5 SHA1 SHA512

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

ttkdpug.dll

Path C:\Users\Admin\Documents\Iterra\ttkdpug.dll
Size 41KB
SHA256 52570ba22c0cf42069777fc28fd0067c940ecec18eefa36c002163b5f1323577
MD5 cdc69e84644f97daf8e142725732a883
SHA1 3be90031b12dac2ba0a381c85cc55f40ed8e79d5
SHA512 df4d7035193838a145498ba86cdc560adc2d921efd54b5d75febb7908d9770e8ece8914f92d221da04b5d96d7eececaf9c71e660b49344a54abe2b46b2831cff
SSDEEP 768:OTPTAaqGEUyQyLPa3brdo9cf4NK0N2FsjJGnNcEUvUJbiS3hHXx:OTPTAaFjy7gVoywE0NtjrEUMJbiSR3x
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/740-132-0x0000000000400000-0x0000000000440000-memory.dmp

Download

memory/740-133-0x0000000000400000-0x0000000000440000-memory.dmp

Download

memory/740-134-0x0000000000400000-0x0000000000440000-memory.dmp

Download

memory/740-201-0x0000000000400000-0x0000000000440000-memory.dmp

Download

memory/740-202-0x0000000000400000-0x0000000000440000-memory.dmp

Download