| ID | PID | Monitor Reason | Image Name | Command Line | Origin ID |
| #1 | 0xcc8 | Analysis Target | 1129c5049ff7842161800d20141de5848888ea44_(b-ware)_vt.malware.exe | "C:\Users\WI2yhmtI onvScY7Pe\Desktop\1129c5049ff7842161800d20141de5848888ea44_(B-Ware)_vt.malware.exe" | |
| #2 | 0x7fc | Injection | explorer.exe | C:\Windows\Explorer.EXE | #1 |
| #3 | 0xd54 | Child Process | explorer.exe | explorer.exe | #1 |
| #4 | 0x1170 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #1 |
| #5 | 0x11ac | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #6 | 0x11bc | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #5 |
| #7 | 0x11c8 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #8 | 0x11d8 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #7 |
| #9 | 0x11e4 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #10 | 0x11fc | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #9 |
| #11 | 0x120c | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #12 | 0x1218 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #11 |
| #13 | 0x1220 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #14 | 0x122c | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #13 |
| #15 | 0x1234 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #16 | 0x1240 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #17 | 0x124c | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #18 | 0x1258 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #19 | 0x1268 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #20 | 0x1274 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #15 |
| #21 | 0x127c | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #22 | 0x1288 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #16 |
| #23 | 0x1290 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #17 |
| #24 | 0x1298 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #25 | 0x12a8 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #18 |
| #26 | 0x12b4 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #27 | 0x12c0 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #28 | 0x12c8 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #19 |
| #29 | 0x12d4 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #30 | 0x12e0 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #21 |
| #31 | 0x12e8 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #24 |
| #32 | 0x1310 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #26 |
| #33 | 0x1318 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #34 | 0x1324 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #27 |
| #35 | 0x1330 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #36 | 0x134c | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #29 |
| #37 | 0x1354 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #38 | 0x1360 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #39 | 0x136c | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #33 |
| #40 | 0x1378 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #41 | 0x1384 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #35 |
| #42 | 0x1394 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #43 | 0x139c | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #37 |
| #44 | 0x13b0 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #38 |
| #45 | 0x13b8 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #46 | 0x13c4 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #40 |
| #47 | 0x13cc | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #48 | 0x13d8 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #49 | 0x13e0 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #42 |
| #50 | 0x13ec | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #51 | 0x13f4 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #45 |
| #52 | 0xd40 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #53 | 0xd38 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #47 |
| #54 | 0x102c | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #55 | 0x434 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #48 |
| #56 | 0x404 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #50 |
| #57 | 0x7f4 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #58 | 0x1064 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #52 |
| #59 | 0x1058 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #60 | 0x688 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #54 |
| #61 | 0x510 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #62 | 0x70c | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #57 |
| #63 | 0x11a4 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #64 | 0xba0 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #59 |
| #65 | 0x1164 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #66 | 0x1144 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #61 |
| #67 | 0x84 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #68 | 0xce8 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #63 |
| #69 | 0x84c | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #70 | 0x710 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #65 |
| #71 | 0xd74 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #72 | 0xfbc | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #67 |
| #73 | 0xcf0 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #74 | 0x1190 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #75 | 0x884 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #69 |
| #76 | 0xc5c | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #71 |
| #77 | 0x980 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #78 | 0x12f4 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #73 |
| #79 | 0x750 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #80 | 0x115c | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #74 |
| #81 | 0x1154 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #82 | 0x1150 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #77 |
| #83 | 0x56c | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #84 | 0x11d0 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #79 |
| #85 | 0xd50 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #86 | 0x4b4 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #81 |
| #87 | 0x704 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #88 | 0x21c | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #83 |
| #89 | 0x8e0 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #90 | 0x8fc | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #91 | 0xb7c | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #85 |
| #92 | 0xa7c | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #93 | 0x1f4 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #87 |
| #94 | 0xa54 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #95 | 0xb5c | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #89 |
| #96 | 0x218 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #97 | 0x8c4 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #90 |
| #98 | 0x3e4 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #99 | 0xbd8 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #100 | 0xb2c | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #94 |
| #101 | 0x4d0 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #102 | 0x6dc | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #96 |
| #103 | 0x924 | Child Process | svhost.exe | "C:\Windows\system32\install\svhost.exe" | #3 |
| #104 | 0x1f8 | Child Process | iexplore.exe | "C:\Program Files\Internet Explorer\iexplore.exe" | #99 |
