Analysis
- max time kernel
152s - max time network
151s - platform
windows10_x64 - resource
win10v200722 - submitted
15/09/2020, 05:42
Static task
static1
Behavioral task
behavioral1
Sample
9e3111302c92059eb6062aacd98d26a8.exe
Resource
win7v200722
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
9e3111302c92059eb6062aacd98d26a8.exe
Resource
win10v200722
windows10_x64
0 signatures
0 seconds
General
- Target 9e3111302c92059eb6062aacd98d26a8.exe
- Size 202KB
- Sample200915-e91vwncrwa
- SHA256 d555ce44fb36cf92eff841e4881f33be598c1231c52c23868cf6eddf5196be8d
- MD5 9e3111302c92059eb6062aacd98d26a8
- SHA1 3acbb07fdb2674208d8f6757b4f640e21083a4be
- SHA512 93d8f923b75308afe275107250a844ffb0c2c1a62342549ae83191a6fa0d97289fcebde2fea889f60fd44aae6338b69016020478dbd3e9b5aa2bdf9a74072ffe
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://informatioshopname.ru/
-
http://ukronet.ru/
-
http://gmbshop.ru/
-
http://ucar.ug/
-
http://woproperty.xyz/
-
http://smatrhouseforyou.ru/
-
http://maningfarmllc.ru/
rc4.i32
rc4.i32
Signatures
- SmokeLoader
Modular backdoor trojan in use since 2014.
- Suspicious use of NtCreateProcessExOtherParentProcess 1 IoCs
description pid Process procid_target PID 2948 created 3524 2948 WerFault.exe 75 - Executes dropped EXE 1 IoCs
pid Process 3524 ujsbjdt - Deletes itself 1 IoCs
pid Process 2964 Process not Found - Loads dropped DLL 1 IoCs
pid Process 3712 9e3111302c92059eb6062aacd98d26a8.exe - Program crash 1 IoCs
pid pid_target Process procid_target 2948 3524 WerFault.exe 75 - Checks SCSI registry key(s) 3 TTPs 3 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI 9e3111302c92059eb6062aacd98d26a8.exe Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI 9e3111302c92059eb6062aacd98d26a8.exe Key enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI 9e3111302c92059eb6062aacd98d26a8.exe - Suspicious behavior: EnumeratesProcesses 2585 IoCs
pid Process 3712 9e3111302c92059eb6062aacd98d26a8.exe 3712 9e3111302c92059eb6062aacd98d26a8.exe 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2948 WerFault.exe 2948 WerFault.exe 2948 WerFault.exe 2948 WerFault.exe 2948 WerFault.exe 2948 WerFault.exe 2948 WerFault.exe 2948 WerFault.exe 2948 WerFault.exe 2948 WerFault.exe 2948 WerFault.exe 2948 WerFault.exe 2948 WerFault.exe 2964 Process not Found 2964 Process not Found 2948 WerFault.exe 2948 WerFault.exe 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found 2964 Process not Found - Suspicious behavior: MapViewOfSection 1 IoCs
pid Process 3712 9e3111302c92059eb6062aacd98d26a8.exe - Suspicious use of AdjustPrivilegeToken 13 IoCs
description pid Process Token: SeRestorePrivilege 2948 WerFault.exe Token: SeBackupPrivilege 2948 WerFault.exe Token: SeDebugPrivilege 2948 WerFault.exe Token: SeShutdownPrivilege 2964 Process not Found Token: SeCreatePagefilePrivilege 2964 Process not Found Token: SeShutdownPrivilege 2964 Process not Found Token: SeCreatePagefilePrivilege 2964 Process not Found Token: SeShutdownPrivilege 2964 Process not Found Token: SeCreatePagefilePrivilege 2964 Process not Found Token: SeShutdownPrivilege 2964 Process not Found Token: SeCreatePagefilePrivilege 2964 Process not Found Token: SeShutdownPrivilege 2964 Process not Found Token: SeCreatePagefilePrivilege 2964 Process not Found
Processes
-
C:\Users\Admin\AppData\Local\Temp\9e3111302c92059eb6062aacd98d26a8.exe"C:\Users\Admin\AppData\Local\Temp\9e3111302c92059eb6062aacd98d26a8.exe"1⤵
- Loads dropped DLL
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
PID:3712
-
C:\Users\Admin\AppData\Roaming\ujsbjdtC:\Users\Admin\AppData\Roaming\ujsbjdt1⤵
- Executes dropped EXE
PID:3524 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3524 -s 4842⤵
- Suspicious use of NtCreateProcessExOtherParentProcess
- Program crash
- Suspicious use of AdjustPrivilegeToken
PID:2948
-