Analysis
- max time kernel
19s - max time network
116s - platform
windows10_x64 - resource
win10v200722 - submitted
14/10/2020, 05:50
Static task
static1
Behavioral task
behavioral1
Sample
1 (7).exe
Resource
win7
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
1 (7).exe
Resource
win10v200722
windows10_x64
0 signatures
0 seconds
General
- Target 1 (7).exe
- Size 4.8MB
- Sample201014-zwzqlbv4xj
- SHA256 3090242812c446fcdcd906f3580b9af0889e4efae53f86da291a24eaa547feed
- MD5 cc35a403e0162ec784d86f64c0ed79c2
- SHA1 357f366191bea4d417702d5cc023f57d31462fee
- SHA512 820be17422a519d3ea9a4c69d3e60d498fd01033acde6b15fb42a979b8562597c1052f44647b64b7e104929bd87ca5d2fcc640749255c8475502c5d1536ba2af
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- BazarBackdoor 4 IoCs
Stealthy backdoor targeting corporate networks, believed to be developed by Trickbot's authors.
description flow ioc HTTP URL 18 https://cuprinc.com/0b0d09693fa3919749314fdc7690d368/4 HTTP URL 19 https://cuprinc.com/0b0d09693fa3919749314fdc7690d368/4 HTTP URL 20 https://cuprinc.com/0b0d09693fa3919749314fdc7690d368/4 HTTP URL 23 https://cuprinc.com/0b0d09693fa3919749314fdc7690d368/2 - Blacklisted process makes network request 4 IoCs
flow pid Process 18 3096 cmd.exe 19 3096 cmd.exe 20 3096 cmd.exe 23 3096 cmd.exe - Suspicious use of SetThreadContext 1 IoCs
description pid Process procid_target PID 732 set thread context of 3096 732 1 (7).exe 76 - Suspicious use of WriteProcessMemory 851 IoCs
description pid Process procid_target PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76 PID 732 wrote to memory of 3096 732 1 (7).exe 76
Processes
-
C:\Users\Admin\AppData\Local\Temp\1 (7).exe"C:\Users\Admin\AppData\Local\Temp\1 (7).exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:732 -
C:\Windows\System32\cmd.exeC:\Windows\System32\cmd.exe2⤵
- Blacklisted process makes network request
PID:3096
-
-
C:\Users\Admin\AppData\Local\Temp\1 (7).exeC:\Users\Admin\AppData\Local\Temp\1 (7).exe 29110860411⤵PID:3136