Analysis
- max time kernel
150s - max time network
11s - platform
windows7_x64 - resource
win7v20201028 - submitted
09/11/2020, 20:58
Static task
static1
Behavioral task
behavioral1
Sample
Fedex85520.exe
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Fedex85520.exe
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
- Target Fedex85520.exe
- Size 982KB
- Sample201109-2mzfktyb4s
- SHA256 a7b2c2dfcb01c3c3b3dc945f3b8d1c907a4de8aba291241466a9da4c69492a29
- MD5 e18a27c28946a96a8503049ea1cb36c4
- SHA1 0eec37c935d347037108baeeb90033f843477d31
- SHA512 7fec5096a95a60714677dfe65876ced387b0982b3061563157e3e2f9d5fdd245a2f22eda5d115945939a2ccf58bbeda474d6e0e7cb3702f0ba910348f664e939
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
- ModiLoader First Stage 7 IoCs
resource yara_rule behavioral1/files/0x00050000000130d5-0.dat modiloader_stage1 behavioral1/files/0x00050000000130d5-1.dat modiloader_stage1 behavioral1/files/0x00050000000130d5-2.dat modiloader_stage1 behavioral1/files/0x00050000000130d5-4.dat modiloader_stage1 behavioral1/files/0x00050000000130d5-5.dat modiloader_stage1 behavioral1/files/0x00050000000130d5-6.dat modiloader_stage1 behavioral1/files/0x00050000000130d5-9.dat modiloader_stage1 - Executes dropped EXE 2 IoCs
pid Process 1796 Tiqavjs.exe 1328 Tiqavjs.exe - Loads dropped DLL 4 IoCs
pid Process 1700 Fedex85520.exe 1700 Fedex85520.exe 1700 Fedex85520.exe 1796 Tiqavjs.exe - Suspicious use of WriteProcessMemory 811 IoCs
description pid Process procid_target PID 1700 wrote to memory of 1796 1700 Fedex85520.exe 26 PID 1700 wrote to memory of 1796 1700 Fedex85520.exe 26 PID 1700 wrote to memory of 1796 1700 Fedex85520.exe 26 PID 1700 wrote to memory of 1796 1700 Fedex85520.exe 26 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27 PID 1796 wrote to memory of 1328 1796 Tiqavjs.exe 27
Processes
-
C:\Users\Admin\AppData\Local\Temp\Fedex85520.exe"C:\Users\Admin\AppData\Local\Temp\Fedex85520.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:1700 -
C:\Users\Admin\AppData\Local\Temp\Tiqavjs.exe"C:\Users\Admin\AppData\Local\Temp\Tiqavjs.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:1796 -
C:\Users\Admin\AppData\Local\Temp\Tiqavjs.exe"C:\Users\Admin\AppData\Local\Temp\Tiqavjs.exe"3⤵
- Executes dropped EXE
PID:1328
-
-