Windows Analysis Report
e.dll

Overview

General Information

Sample name: e.dll
Analysis ID: 1519390
MD5: 972d3e17b96745be89b80ec5d8f4f9d3
SHA1: e97c6461bbdcd91566f4cb75b456e399b7fe06c2
SHA256: b116511e3960ab5fa53ad6a3243240be11235ebdc323705827713cf12a9aeeda
Infos:

Detection

Score: 60
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Antivirus / Scanner detection for submitted sample
AI detected suspicious sample
Machine Learning detection for sample
Tries to detect sandboxes / dynamic malware analysis system (file name check)
Abnormal high CPU Usage
Contains functionality to call native functions
Contains functionality to query CPU information (cpuid)
Contains functionality to read the PEB
Creates a process in suspended mode (likely to inject code)
Detected potential crypto function
PE file contains more sections than normal
PE file contains sections with non-standard names
Sample execution stops while process was sleeping (likely an evasion)
Tries to resolve domain names, but no domain seems valid (expired dropper behavior)
Uses 32bit PE files
Uses code obfuscation techniques (call, push, ret)

Classification

AV Detection
barindex
Antivirus / Scanner detection for submitted sample
Source: e.dll Avira: detected
AI detected suspicious sample
Source: Submited Sample Integrated Neural Analysis Model: Matched 99.8% probability
Machine Learning detection for sample
Source: e.dll Joe Sandbox ML: detected
Uses 32bit PE files
Source: e.dll Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE, DLL
Source: Binary string: a:\s7i.pdbL source: e.dll
Source: Binary string: a:\s7i.pdb source: loaddll32.exe, 00000000.00000002.3294503794.0000000000E3F000.00000002.00000001.01000000.00000003.sdmp, e.dll
Tries to resolve domain names, but no domain seems valid (expired dropper behavior)
Source: unknown DNS traffic detected: query: 206.23.85.13.in-addr.arpa replaycode: Name error (3)
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global traffic DNS traffic detected: DNS query: 206.23.85.13.in-addr.arpa
Abnormal high CPU Usage
Source: C:\Windows\System32\loaddll32.exe Process Stats: CPU usage > 49%
Contains functionality to call native functions
Source: C:\Windows\SysWOW64\rundll32.exe Code function: 3_2_049B2084 NtCreateThreadEx, 3_2_049B2084
Detected potential crypto function
Source: C:\Windows\SysWOW64\rundll32.exe Code function: 3_2_04891680 3_2_04891680
Source: C:\Windows\SysWOW64\rundll32.exe Code function: 3_2_048922A8 3_2_048922A8
Source: C:\Windows\SysWOW64\rundll32.exe Code function: 3_2_04891EAF 3_2_04891EAF
Source: C:\Windows\SysWOW64\rundll32.exe Code function: 3_2_04891698 3_2_04891698
Source: C:\Windows\SysWOW64\rundll32.exe Code function: 3_2_04894094 3_2_04894094
Source: C:\Windows\SysWOW64\rundll32.exe Code function: 3_2_0489252C 3_2_0489252C
Source: C:\Windows\SysWOW64\rundll32.exe Code function: 3_2_04894458 3_2_04894458
Source: C:\Windows\SysWOW64\rundll32.exe Code function: 3_2_048945E8 3_2_048945E8
Source: C:\Windows\SysWOW64\rundll32.exe Code function: 3_2_049B2084 3_2_049B2084
Source: C:\Windows\SysWOW64\rundll32.exe Code function: 3_2_049B22A0 3_2_049B22A0
Source: C:\Windows\SysWOW64\rundll32.exe Code function: 3_2_049B71D2 3_2_049B71D2
Source: C:\Windows\SysWOW64\rundll32.exe Code function: 3_2_049B1460 3_2_049B1460
Source: C:\Windows\SysWOW64\rundll32.exe Code function: 3_2_049BA660 3_2_049BA660
Source: C:\Windows\SysWOW64\rundll32.exe Code function: 3_2_049B7410 3_2_049B7410
Source: C:\Windows\SysWOW64\rundll32.exe Code function: 3_2_049BA900 3_2_049BA900
Source: C:\Windows\SysWOW64\rundll32.exe Code function: 3_2_049B1240 3_2_049B1240
PE file contains more sections than normal
Source: e.dll Static PE information: Number of sections : 13 > 10
Uses 32bit PE files
Source: e.dll Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE, DLL
Source: e.dll Static PE information: Section: z4g ZLIB complexity 0.9946666190294715
Source: e.dll Static PE information: Section: qm ZLIB complexity 0.9991314643252213
Source: e.dll Static PE information: Section: L ZLIB complexity 0.9966262291217672
Source: classification engine Classification label: mal60.evad.winDLL@6/0@1/0
Source: C:\Windows\System32\conhost.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7164:120:WilError_03
Source: C:\Windows\System32\loaddll32.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\e.dll",#1
Source: unknown Process created: C:\Windows\System32\loaddll32.exe loaddll32.exe "C:\Users\user\Desktop\e.dll"
Source: C:\Windows\System32\loaddll32.exe Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll32.exe Process created: C:\Windows\SysWOW64\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\e.dll",#1
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\e.dll",#1
Source: C:\Windows\System32\loaddll32.exe Process created: C:\Windows\SysWOW64\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\e.dll",#1 Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\e.dll",#1 Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: z55x9i2q7.dll Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: z55x9i2q7.dll Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: z55x9i2q7.dll Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: z55x9i2q7.dll Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: z55x9i2q7.dll Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: z55x9i2q7.dll Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: z55x9i2q7.dll Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: z55x9i2q7.dll Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: z55x9i2q7.dll Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: z55x9i2q7.dll Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: z55x9i2q7.dll Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: z55x9i2q7.dll Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: z55x9i2q7.dll Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: z55x9i2q7.dll Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe Section loaded: apphelp.dll Jump to behavior
Source: e.dll Static file information: File size 2228224 > 1048576
Source: e.dll Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: Binary string: a:\s7i.pdbL source: e.dll
Source: Binary string: a:\s7i.pdb source: loaddll32.exe, 00000000.00000002.3294503794.0000000000E3F000.00000002.00000001.01000000.00000003.sdmp, e.dll
PE file contains sections with non-standard names
Source: e.dll Static PE information: section name: .crt1
Source: e.dll Static PE information: section name: z4g
Source: e.dll Static PE information: section name: qm
Source: e.dll Static PE information: section name: L
Source: e.dll Static PE information: section name: CONST
Source: e.dll Static PE information: section name: 3
Source: e.dll Static PE information: section name: buicKDZl
Source: e.dll Static PE information: section name: CRT
Uses code obfuscation techniques (call, push, ret)
Source: C:\Windows\System32\loaddll32.exe Code function: 0_2_0103996B pushfd ; ret 0_2_0103997B
Source: C:\Windows\System32\loaddll32.exe Code function: 0_2_010399DB pushfd ; iretd 0_2_010399DC
Source: C:\Windows\System32\loaddll32.exe Code function: 0_2_0103D1F4 push edi; ret 0_2_0103D1F5
Source: C:\Windows\SysWOW64\rundll32.exe Process information set: NOOPENFILEERRORBOX Jump to behavior

Malware Analysis System Evasion
barindex
Tries to detect sandboxes / dynamic malware analysis system (file name check)
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Source: C:\Windows\System32\loaddll32.exe Section loaded: \KnownDlls32\TeSTAPp.EXE Jump to behavior
Sample execution stops while process was sleeping (likely an evasion)
Source: C:\Windows\System32\conhost.exe Last function: Thread delayed
Contains functionality to read the PEB
Source: C:\Windows\System32\loaddll32.exe Code function: 0_2_00E3C340 mov eax, dword ptr fs:[00000030h] 0_2_00E3C340
Creates a process in suspended mode (likely to inject code)
Source: C:\Windows\SysWOW64\cmd.exe Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\e.dll",#1 Jump to behavior
Contains functionality to query CPU information (cpuid)
Source: C:\Windows\System32\loaddll32.exe Code function: 0_2_00E31090 cpuid 0_2_00E31090
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1519390 Sample: e.dll Startdate: 26/09/2024 Architecture: WINDOWS Score: 60 17 206.23.85.13.in-addr.arpa 2->17 19 Antivirus / Scanner detection for submitted sample 2->19 21 Machine Learning detection for sample 2->21 23 AI detected suspicious sample 2->23 8 loaddll32.exe 1 2->8         started        signatures3 process4 signatures5 25 Tries to detect sandboxes / dynamic malware analysis system (file name check) 8->25 11 cmd.exe 1 8->11         started        13 conhost.exe 8->13         started        process6 process7 15 rundll32.exe 11->15         started       
⊘No contacted IP infos

Contacted Domains

Name IP Active
206.23.85.13.in-addr.arpa unknown unknown