Found reference to API "CreateProcessA" (Indicator: "CreateProcess"; File: "d6069cb7acd4675b324603f2adc3e83fa7fa1829e73052a8d62a10f3d99a8200") Found reference to API "__COMPAT_LAYER=ElevateCreateProcess WRPMitigation" (Indicator: "CreateProcess"; Source: "00000000-00002752.00000000.98257.02C30000.00000004.mdmp, 00000000-00002752.00000001.100178.02C20000.00000004.mdmp, 00000000-00002752.00000001.100178.02ED0000.00000004.mdmp, 00000000-00002752.00000002.102099.02C20000.00000004.mdmp, 00000000-00002752.00000002.102099.02C30000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00002752.00000000.98257.02C30000.00000004.mdmp, 00000000-00002752.00000002.102099.02C30000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00002752.00000000.98257.02C30000.00000004.mdmp, 00000000-00002752.00000002.102099.02C30000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00002752.00000000.98257.02C30000.00000004.mdmp, 00000000-00002752.00000002.102099.02C30000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00002752.00000000.98257.02C30000.00000004.mdmp, 00000000-00002752.00000002.102099.02C30000.00000004.mdmp") Found reference to API "levateCreateProcess" (Indicator: "CreateProcess"; Source: "00000000-00002752.00000001.100178.02C20000.00000004.mdmp, 00000000-00002752.00000002.102099.02C20000.00000004.mdmp") Found reference to API "CreateProcessA" (Indicator: "CreateProcess"; Source: "00000000-00004116.00000000.97559.0106A000.00000002.mdmp") Found reference to API "__COMPAT_LAYER=ElevateCreateProcess WRPMitigation" (Indicator: "CreateProcess"; Source: "00000000-00004116.00000000.97559.03360000.00000004.mdmp, 00000000-00004116.00000000.97559.03390000.00000004.mdmp") Found reference to API "levateCreateProcess" (Indicator: "CreateProcess"; Source: "00000000-00004116.00000000.97559.03390000.00000004.mdmp") Found reference to API "evateCreateProcess WRPMitigation" (Indicator: "CreateProcess"; Source: "00000000-00004116.00000000.97559.03390000.00000004.mdmp") Found reference to API "ElevateCreateProcess WRPMitigation" (Indicator: "CreateProcess"; Source: "00000000-00004116.00000000.97559.03390000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00004116.00000000.97559.03390000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00004116.00000000.97559.03390000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00004116.00000000.97559.03390000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00004116.00000000.97559.03390000.00000004.mdmp") Found reference to API "PRINT,NS_ElevateCreateProcess::APIHook_CreateProcessA,318,[ApiName] Hook Entered" (Indicator: "CreateProcess"; Source: "00000000-00004116.00000000.97559.03390000.00000004.mdmp") Found reference to API "levateCreateProcess" (Indicator: "CreateProcess"; Source: "00000000-00006332.00000000.97499.02630000.00000004.mdmp, 00000000-00006332.00000001.99420.02630000.00000004.mdmp, 00000000-00006332.00000002.101337.02630000.00000004.mdmp") Found reference to API "__COMPAT_LAYER=ElevateCreateProcess WRPMitigation" (Indicator: "CreateProcess"; Source: "00000000-00006332.00000000.97499.02630000.00000004.mdmp, 00000000-00006332.00000001.99420.02630000.00000004.mdmp, 00000000-00006332.00000002.101337.02630000.00000004.mdmp, 00000000-00006332.00000002.101337.029B0000.00000004.mdmp") Found reference to API "ElevateCreateProcess WRPMitigation" (Indicator: "CreateProcess"; Source: "00000000-00006332.00000000.97499.02630000.00000004.mdmp, 00000000-00006332.00000001.99420.02630000.00000004.mdmp, 00000000-00006332.00000002.101337.02630000.00000004.mdmp") Found reference to API "E="KERNEL32.DLL" FUNCTION="CreateProcessW"/>" (Indicator: "CreateProcess"; Source: "00000000-00006332.00000000.97499.02630000.00000004.mdmp, 00000000-00006332.00000001.99420.02630000.00000004.mdmp, 00000000-00006332.00000002.101337.02630000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00006332.00000000.97499.02630000.00000004.mdmp, 00000000-00006332.00000001.99420.02630000.00000004.mdmp, 00000000-00006332.00000002.101337.02630000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00006332.00000000.97499.02630000.00000004.mdmp, 00000000-00006332.00000001.99420.02630000.00000004.mdmp, 00000000-00006332.00000002.101337.02630000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00006332.00000000.97499.02630000.00000004.mdmp, 00000000-00006332.00000001.99420.02630000.00000004.mdmp, 00000000-00006332.00000002.101337.02630000.00000004.mdmp") Found reference to API "" (Indicator: "CreateProcess"; Source: "00000000-00006332.00000000.97499.02630000.00000004.mdmp, 00000000-00006332.00000001.99420.02630000.00000004.mdmp, 00000000-00006332.00000002.101337.02630000.00000004.mdmp")