Analysis
- max time kernel
147s - max time network
106s - platform
windows10_x64 - resource
win10v200430 - submitted
24/06/2020, 14:58
Static task
static1
Behavioral task
behavioral1
Sample
Purchase.exe
Resource
win7
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Purchase.exe
Resource
win10v200430
windows10_x64
0 signatures
0 seconds
General
- Target Purchase.exe
- Size 1.3MB
- Sample200624-63kf82b3da
- SHA256 4fc5c83ab8d45e9b46bc1ab2a20e653d868e57f357b7f5b4ba433706594bc2ca
- MD5 cce622546526c145c6b65794c2fce2ed
- SHA1 688125fe18ff6dc7c51d4f2de3ee28682822bd75
- SHA512 e1d6fa3ae63f44b9173165464ca03233aaaa439afe1daea48d99be6a6e5bbd4cc8c9bb08a4c359c887265aae462a9efff6d4b5ad0d348a44e0dab2fe51ad92f0
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 328 IoCs
description pid Process procid_target PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68 PID 2532 wrote to memory of 2696 2532 Purchase.exe 68