Bazar Loader

Detected loader normally used to deploy BazarBackdoor malware.

Process spawned unexpected child process

This typically indicates the parent process was compromised via an exploit or macro.

Bazar/Team9 Loader payload

Blocklisted process makes network request