Source: | Binary string: wgdi32full.pdb source: WerFault.exe, 0000000E.00000003.949867302.0000000004E41000.00000004.00000001.sdmp, WerFault.exe, 00000011.00000003.971559419.0000000005151000.00000004.00000001.sdmp |
Source: | Binary string: msvcp_win.pdb source: WerFault.exe, 0000000E.00000003.949867302.0000000004E41000.00000004.00000001.sdmp, WerFault.exe, 00000011.00000003.971559419.0000000005151000.00000004.00000001.sdmp |
Source: | Binary string: wkernel32.pdb source: WerFault.exe, 0000000E.00000003.949867302.0000000004E41000.00000004.00000001.sdmp, WerFault.exe, 0000000E.00000003.947501464.0000000004AB7000.00000004.00000001.sdmp, WerFault.exe, 00000011.00000003.971559419.0000000005151000.00000004.00000001.sdmp |
Source: | Binary string: ucrtbase.pdb source: WerFault.exe, 0000000E.00000003.949867302.0000000004E41000.00000004.00000001.sdmp, WerFault.exe, 00000011.00000003.971559419.0000000005151000.00000004.00000001.sdmp |
Source: | Binary string: wkernelbase.pdb source: WerFault.exe, 0000000E.00000003.949867302.0000000004E41000.00000004.00000001.sdmp, WerFault.exe, 00000011.00000003.971559419.0000000005151000.00000004.00000001.sdmp |
Source: | Binary string: wimm32.pdb source: WerFault.exe, 0000000E.00000003.949867302.0000000004E41000.00000004.00000001.sdmp, WerFault.exe, 00000011.00000003.971559419.0000000005151000.00000004.00000001.sdmp |
Source: | Binary string: wwin32u.pdb source: WerFault.exe, 0000000E.00000003.949867302.0000000004E41000.00000004.00000001.sdmp, WerFault.exe, 00000011.00000003.971559419.0000000005151000.00000004.00000001.sdmp |
Source: | Binary string: wntdll.pdb source: WerFault.exe, 0000000E.00000003.949867302.0000000004E41000.00000004.00000001.sdmp, WerFault.exe, 00000011.00000003.971559419.0000000005151000.00000004.00000001.sdmp |
Source: | Binary string: apphelp.pdb source: WerFault.exe, 0000000E.00000003.949867302.0000000004E41000.00000004.00000001.sdmp, WerFault.exe, 00000011.00000003.971559419.0000000005151000.00000004.00000001.sdmp |
Source: | Binary string: wuser32.pdb source: WerFault.exe, 0000000E.00000003.949867302.0000000004E41000.00000004.00000001.sdmp, WerFault.exe, 00000011.00000003.971559419.0000000005151000.00000004.00000001.sdmp |
Source: | Binary string: a[ojr^oCReportStore::Prune: MaxReportCount=%d MaxSizeInMb=%dRSDSwkernel32.pdb source: WerFault.exe, 0000000E.00000002.957692909.0000000002C92000.00000004.00000001.sdmp |
Source: | Binary string: wntdll.pdbk source: WerFault.exe, 0000000E.00000003.949867302.0000000004E41000.00000004.00000001.sdmp, WerFault.exe, 00000011.00000003.971559419.0000000005151000.00000004.00000001.sdmp |
Source: | Binary string: wgdi32.pdb source: WerFault.exe, 0000000E.00000003.949867302.0000000004E41000.00000004.00000001.sdmp, WerFault.exe, 00000011.00000003.971559419.0000000005151000.00000004.00000001.sdmp |
Source: Malware configuration extractor | IPs: 46.55.222.11:443 |
Source: Malware configuration extractor | IPs: 104.245.52.73:8080 |
Source: Malware configuration extractor | IPs: 41.76.108.46:8080 |
Source: Malware configuration extractor | IPs: 103.8.26.103:8080 |
Source: Malware configuration extractor | IPs: 185.184.25.237:8080 |
Source: Malware configuration extractor | IPs: 103.8.26.102:8080 |
Source: Malware configuration extractor | IPs: 203.114.109.124:443 |
Source: Malware configuration extractor | IPs: 45.118.115.99:8080 |
Source: Malware configuration extractor | IPs: 178.79.147.66:8080 |
Source: Malware configuration extractor | IPs: 58.227.42.236:80 |
Source: Malware configuration extractor | IPs: 45.118.135.203:7080 |
Source: Malware configuration extractor | IPs: 103.75.201.2:443 |
Source: Malware configuration extractor | IPs: 195.154.133.20:443 |
Source: Malware configuration extractor | IPs: 45.142.114.231:8080 |
Source: Malware configuration extractor | IPs: 212.237.5.209:443 |
Source: Malware configuration extractor | IPs: 207.38.84.195:8080 |
Source: Malware configuration extractor | IPs: 104.251.214.46:8080 |
Source: Malware configuration extractor | IPs: 212.237.17.99:8080 |
Source: Malware configuration extractor | IPs: 212.237.56.116:7080 |
Source: Malware configuration extractor | IPs: 216.158.226.206:443 |
Source: Malware configuration extractor | IPs: 110.232.117.186:8080 |
Source: Malware configuration extractor | IPs: 158.69.222.101:443 |
Source: Malware configuration extractor | IPs: 107.182.225.142:8080 |
Source: Malware configuration extractor | IPs: 176.104.106.96:8080 |
Source: Malware configuration extractor | IPs: 81.0.236.90:443 |
Source: Malware configuration extractor | IPs: 50.116.54.215:443 |
Source: Malware configuration extractor | IPs: 138.185.72.26:8080 |
Source: Malware configuration extractor | IPs: 51.68.175.8:8080 |
Source: Malware configuration extractor | IPs: 210.57.217.132:8080 |
Source: svchost.exe, 0000001B.00000003.1147321502.000001EEEB38F000.00000004.00000001.sdmp | String found in binary or memory: Try it free for 30 days, no strings attached\r\n\r\nLike us on Facebook: http://www.facebook.com/spotify \r\nFollow us on Twitter: http://twitter.com/spotify","ProductTitle":"Spotify Music","SearchTitles":[{"SearchTitleString":"Spotify","SearchTitleType":"SearchHint"},{"SearchTitleString":"Music","SearchTitleType":"SearchHint"},{"SearchTitleString":"music apps","SearchTitleType":"SearchHint"},{"SearchTitleString":"free music","SearchTitleType":"SearchHint"},{"SearchTitleString":"pandora","SearchTitleType":"SearchHint"},{"SearchTitleString":"streaming","SearchTitleType":"SearchHint"},{"SearchTitleString":"soundcloud","SearchTitleType":"SearchHint"}],"Language":"en-us","Markets":["US","DZ","AR","AU","AT","BH","BD","BE","BR","BG","CA","CL","CN","CO","CR","HR","CY","CZ","DK","EG","EE","FI","FR","DE","GR","GT","HK","HU","IS","IN","ID","IQ","IE","IL","IT","JP","JO","KZ","KE","KW","LV","LB","LI","LT","LU","MY","MT","MR","MX","MA","NL","NZ","NG","NO","OM","PK","PE","PH","PL","PT","QA","RO","RU","SA","RS","SG","SK","SI","ZA","KR","ES","SE","CH","TW","TH","TT","TN","TR","UA","AE","GB","VN","YE","LY","LK","UY","VE","AF","AX","AL","AS","AO","AI","AQ","A equals www.facebook.com (Facebook) |
Source: svchost.exe, 0000001B.00000003.1147321502.000001EEEB38F000.00000004.00000001.sdmp | String found in binary or memory: Try it free for 30 days, no strings attached\r\n\r\nLike us on Facebook: http://www.facebook.com/spotify \r\nFollow us on Twitter: http://twitter.com/spotify","ProductTitle":"Spotify Music","SearchTitles":[{"SearchTitleString":"Spotify","SearchTitleType":"SearchHint"},{"SearchTitleString":"Music","SearchTitleType":"SearchHint"},{"SearchTitleString":"music apps","SearchTitleType":"SearchHint"},{"SearchTitleString":"free music","SearchTitleType":"SearchHint"},{"SearchTitleString":"pandora","SearchTitleType":"SearchHint"},{"SearchTitleString":"streaming","SearchTitleType":"SearchHint"},{"SearchTitleString":"soundcloud","SearchTitleType":"SearchHint"}],"Language":"en-us","Markets":["US","DZ","AR","AU","AT","BH","BD","BE","BR","BG","CA","CL","CN","CO","CR","HR","CY","CZ","DK","EG","EE","FI","FR","DE","GR","GT","HK","HU","IS","IN","ID","IQ","IE","IL","IT","JP","JO","KZ","KE","KW","LV","LB","LI","LT","LU","MY","MT","MR","MX","MA","NL","NZ","NG","NO","OM","PK","PE","PH","PL","PT","QA","RO","RU","SA","RS","SG","SK","SI","ZA","KR","ES","SE","CH","TW","TH","TT","TN","TR","UA","AE","GB","VN","YE","LY","LK","UY","VE","AF","AX","AL","AS","AO","AI","AQ","A equals www.twitter.com (Twitter) |
Source: svchost.exe, 0000001B.00000003.1147321502.000001EEEB38F000.00000004.00000001.sdmp, svchost.exe, 0000001B.00000003.1147295297.000001EEEB3A0000.00000004.00000001.sdmp | String found in binary or memory: Try it free for 30 days, no strings attached\r\n\r\nLike us on Facebook: http://www.facebook.com/spotify \r\nFollow us on Twitter: http://twitter.com/spotify","ProductTitle":"Spotify Music","SearchTitles":[{"SearchTitleString":"Spotify","SearchTitleType":"SearchHint"},{"SearchTitleString":"Music","SearchTitleType":"SearchHint"},{"SearchTitleString":"music apps","SearchTitleType":"SearchHint"},{"SearchTitleString":"free music","SearchTitleType":"SearchHint"},{"SearchTitleString":"pandora","SearchTitleType":"SearchHint"},{"SearchTitleString":"streaming","SearchTitleType":"SearchHint"},{"SearchTitleString":"soundcloud","SearchTitleType":"SearchHint"}],"Language":"en-us","Markets":["US","DZ","AR","AU","AT","BH","BD","BE","BR","BG","CA","CL","CN","CO","CR","HR","CY","CZ","DK","EG","EE","FI","FR","DE","GR","GT","HK","HU","IS","IN","ID","IQ","IE","IL","IT","JP","JO","KZ","KE","KW","LV","LB","LI","LT","LU","MY","MT","MR","MX","MA","NL","NZ","NG","NO","OM","PK","PE","PH","PL","PT","QA","RO","RU","SA","RS","SG","SK","SI","ZA","KR","ES","SE","CH","TW","TH","TT","TN","TR","UA","AE","GB","VN","YE","LY","LK","UY","VE","AF","AX","AL","AS","AO","AI","AQ","AG","AM","AW","BO","BQ","BA","BW","BV","IO","BN","BF","BI","KH","CM","CV","KY","CF","TD","TL","DJ","DM","DO","EC","SV","GQ","ER","ET","FK","FO","FJ","GF","PF","TF","GA","GM","GE","GH","GI","GL","GD","GP","GU","GG","GN","GW","GY","HT","HM","HN","AZ","BS","BB","BY","BZ","BJ","BM","BT","KM","CG","CD","CK","CX","CC","CI","CW","JM","SJ","JE","KI","KG","LA","LS","LR","MO","MK","MG","MW","IM","MH","MQ","MU","YT","FM","MD","MN","MS","MZ","MM","NA","NR","NP","MV","ML","NC","NI","NE","NU","NF","PW","PS","PA","PG","PY","RE","RW","BL","MF","WS","ST","SN","MP","PN","SX","SB","SO","SC","SL","GS","SH","KN","LC","PM","VC","TJ","TZ","TG","TK","TO","TM","TC","TV","UM","UG","VI","VG","WF","EH","ZM","ZW","UZ","VU","SR","SZ","AD","MC","SM","ME","VA","NEUTRAL"]}],"MarketProperties":[{"RelatedProducts":[],"Markets":["US"]}],"ProductASchema":"Product;3","ProductBSchema":"ProductUnifiedApp;3","ProductId":"9NCBCSZSJRSB","Properties":{"PackageFamilyName":"SpotifyAB.SpotifyMusic_zpdnekdrzrea0","PackageIdentityName":"SpotifyAB.SpotifyMusic","PublisherCertificateName":"CN=453637B3-4E12-4CDF-B0D3-2A3C863BF6EF","XboxCrossGenSetId":null,"XboxConsoleGenOptimized":null,"XboxConsoleGenCompatible":null},"AlternateIds":[{"IdType":"LegacyWindowsStoreProductId","Value":"ceac5d3f-8a4f-40e1-9a67-76d9108c7cb5"},{"IdType":"LegacyWindowsPhonePr |