Analysis
-
max time kernel
150s -
max time network
116s -
platform
windows10_x64 -
resource
win10 -
submitted
08-07-2020 07:14
Static task
static1
Behavioral task
behavioral1
Sample
4a2827e59e646de4a83818f494796b96.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
4a2827e59e646de4a83818f494796b96.exe
Resource
win10
0 signatures
0 seconds
General
-
Target
4a2827e59e646de4a83818f494796b96.exe
-
Size
448KB
-
MD5
4a2827e59e646de4a83818f494796b96
-
SHA1
9f513fa6dc12d023e8a069929486931d8d4aadf3
-
SHA256
1aa2ba9a2898cc652c73b06bc862739c8a996f9f241b3c0dfd82115583b6e887
-
SHA512
e8ea9af5a4ebc8cb7d96569f19becd18da5c6862296939d46aad139b9f4deec8d1853af542b3929df307ed87b6425f6b8b3fbda0d093a673404095f3512360d2
Score
7/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 2993 IoCs
Processes:
4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exedescription pid process target process PID 2976 wrote to memory of 2888 2976 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2976 wrote to memory of 2888 2976 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2976 wrote to memory of 2888 2976 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2976 wrote to memory of 2888 2976 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2976 wrote to memory of 3852 2976 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 2976 wrote to memory of 3852 2976 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 2976 wrote to memory of 3852 2976 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 3852 wrote to memory of 3892 3852 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3852 wrote to memory of 3892 3852 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3852 wrote to memory of 3892 3852 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3852 wrote to memory of 3892 3852 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3852 wrote to memory of 3340 3852 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 3852 wrote to memory of 3340 3852 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 3852 wrote to memory of 3340 3852 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 3340 wrote to memory of 1672 3340 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3340 wrote to memory of 1672 3340 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3340 wrote to memory of 1672 3340 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3340 wrote to memory of 1672 3340 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3340 wrote to memory of 1984 3340 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 3340 wrote to memory of 1984 3340 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 3340 wrote to memory of 1984 3340 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 1984 wrote to memory of 3496 1984 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1984 wrote to memory of 3496 1984 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1984 wrote to memory of 3496 1984 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1984 wrote to memory of 3496 1984 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1984 wrote to memory of 1896 1984 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 1984 wrote to memory of 1896 1984 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 1984 wrote to memory of 1896 1984 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 1896 wrote to memory of 1652 1896 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1896 wrote to memory of 1652 1896 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1896 wrote to memory of 1652 1896 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1896 wrote to memory of 1652 1896 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1896 wrote to memory of 3724 1896 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 1896 wrote to memory of 3724 1896 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 1896 wrote to memory of 3724 1896 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 3724 wrote to memory of 636 3724 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3724 wrote to memory of 636 3724 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3724 wrote to memory of 636 3724 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3724 wrote to memory of 636 3724 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3724 wrote to memory of 352 3724 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 3724 wrote to memory of 352 3724 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 3724 wrote to memory of 352 3724 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 352 wrote to memory of 1164 352 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 352 wrote to memory of 1164 352 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 352 wrote to memory of 1164 352 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 352 wrote to memory of 1164 352 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 352 wrote to memory of 1460 352 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 352 wrote to memory of 1460 352 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 352 wrote to memory of 1460 352 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 1460 wrote to memory of 1648 1460 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1460 wrote to memory of 1648 1460 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1460 wrote to memory of 1648 1460 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1460 wrote to memory of 1648 1460 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1460 wrote to memory of 2000 1460 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 1460 wrote to memory of 2000 1460 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 1460 wrote to memory of 2000 1460 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe PID 2000 wrote to memory of 2084 2000 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2000 wrote to memory of 2084 2000 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2000 wrote to memory of 2084 2000 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2000 wrote to memory of 2088 2000 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2000 wrote to memory of 2088 2000 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2000 wrote to memory of 2088 2000 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2000 wrote to memory of 2088 2000 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2000 wrote to memory of 2716 2000 4a2827e59e646de4a83818f494796b96.exe 4a2827e59e646de4a83818f494796b96.exe -
Suspicious behavior: MapViewOfSection 508 IoCs
Processes:
4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exepid process 2976 4a2827e59e646de4a83818f494796b96.exe 3852 4a2827e59e646de4a83818f494796b96.exe 3340 4a2827e59e646de4a83818f494796b96.exe 1984 4a2827e59e646de4a83818f494796b96.exe 1896 4a2827e59e646de4a83818f494796b96.exe 3724 4a2827e59e646de4a83818f494796b96.exe 352 4a2827e59e646de4a83818f494796b96.exe 1460 4a2827e59e646de4a83818f494796b96.exe 2000 4a2827e59e646de4a83818f494796b96.exe 2000 4a2827e59e646de4a83818f494796b96.exe 2716 4a2827e59e646de4a83818f494796b96.exe 3048 4a2827e59e646de4a83818f494796b96.exe 3212 4a2827e59e646de4a83818f494796b96.exe 3212 4a2827e59e646de4a83818f494796b96.exe 2908 4a2827e59e646de4a83818f494796b96.exe 1004 4a2827e59e646de4a83818f494796b96.exe 892 4a2827e59e646de4a83818f494796b96.exe 1796 4a2827e59e646de4a83818f494796b96.exe 1796 4a2827e59e646de4a83818f494796b96.exe 1576 4a2827e59e646de4a83818f494796b96.exe 1576 4a2827e59e646de4a83818f494796b96.exe 3648 4a2827e59e646de4a83818f494796b96.exe 2524 4a2827e59e646de4a83818f494796b96.exe 2524 4a2827e59e646de4a83818f494796b96.exe 2524 4a2827e59e646de4a83818f494796b96.exe 3104 4a2827e59e646de4a83818f494796b96.exe 3104 4a2827e59e646de4a83818f494796b96.exe 3104 4a2827e59e646de4a83818f494796b96.exe 1656 4a2827e59e646de4a83818f494796b96.exe 2600 4a2827e59e646de4a83818f494796b96.exe 2596 4a2827e59e646de4a83818f494796b96.exe 2596 4a2827e59e646de4a83818f494796b96.exe 3476 4a2827e59e646de4a83818f494796b96.exe 2532 4a2827e59e646de4a83818f494796b96.exe 2644 4a2827e59e646de4a83818f494796b96.exe 2084 4a2827e59e646de4a83818f494796b96.exe 3344 4a2827e59e646de4a83818f494796b96.exe 2556 4a2827e59e646de4a83818f494796b96.exe 2556 4a2827e59e646de4a83818f494796b96.exe 956 4a2827e59e646de4a83818f494796b96.exe 664 4a2827e59e646de4a83818f494796b96.exe 1424 4a2827e59e646de4a83818f494796b96.exe 1424 4a2827e59e646de4a83818f494796b96.exe 1656 4a2827e59e646de4a83818f494796b96.exe 3324 4a2827e59e646de4a83818f494796b96.exe 644 4a2827e59e646de4a83818f494796b96.exe 644 4a2827e59e646de4a83818f494796b96.exe 2052 4a2827e59e646de4a83818f494796b96.exe 1660 4a2827e59e646de4a83818f494796b96.exe 1672 4a2827e59e646de4a83818f494796b96.exe 3212 4a2827e59e646de4a83818f494796b96.exe 2384 4a2827e59e646de4a83818f494796b96.exe 3412 4a2827e59e646de4a83818f494796b96.exe 3136 4a2827e59e646de4a83818f494796b96.exe 1576 4a2827e59e646de4a83818f494796b96.exe 1876 4a2827e59e646de4a83818f494796b96.exe 2792 4a2827e59e646de4a83818f494796b96.exe 3768 4a2827e59e646de4a83818f494796b96.exe 3412 4a2827e59e646de4a83818f494796b96.exe 3456 4a2827e59e646de4a83818f494796b96.exe 3728 4a2827e59e646de4a83818f494796b96.exe 1112 4a2827e59e646de4a83818f494796b96.exe 536 4a2827e59e646de4a83818f494796b96.exe 68 4a2827e59e646de4a83818f494796b96.exe -
Suspicious use of SetThreadContext 368 IoCs
Processes:
4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exedescription pid process target process PID 2976 set thread context of 2888 2976 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3852 set thread context of 3892 3852 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3340 set thread context of 1672 3340 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1984 set thread context of 3496 1984 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1896 set thread context of 1652 1896 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3724 set thread context of 636 3724 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 352 set thread context of 1164 352 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1460 set thread context of 1648 1460 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2000 set thread context of 2088 2000 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2716 set thread context of 3848 2716 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3048 set thread context of 2976 3048 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3212 set thread context of 3324 3212 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2908 set thread context of 1912 2908 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1004 set thread context of 1896 1004 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 892 set thread context of 1676 892 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1796 set thread context of 1492 1796 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1576 set thread context of 2696 1576 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3648 set thread context of 1888 3648 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2524 set thread context of 2192 2524 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3104 set thread context of 1876 3104 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1656 set thread context of 3724 1656 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2600 set thread context of 2984 2600 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2596 set thread context of 1208 2596 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3476 set thread context of 3868 3476 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2532 set thread context of 3788 2532 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2644 set thread context of 2796 2644 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2084 set thread context of 2560 2084 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3344 set thread context of 3792 3344 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2556 set thread context of 1300 2556 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 956 set thread context of 1916 956 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 664 set thread context of 1532 664 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1424 set thread context of 4000 1424 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1656 set thread context of 1168 1656 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3324 set thread context of 1624 3324 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 644 set thread context of 420 644 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2052 set thread context of 408 2052 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1660 set thread context of 2980 1660 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1672 set thread context of 1884 1672 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3212 set thread context of 1232 3212 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2384 set thread context of 3764 2384 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3412 set thread context of 3404 3412 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3136 set thread context of 992 3136 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1576 set thread context of 2052 1576 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1876 set thread context of 932 1876 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2792 set thread context of 3868 2792 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3768 set thread context of 3560 3768 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3412 set thread context of 2560 3412 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3456 set thread context of 3468 3456 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 3728 set thread context of 996 3728 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1112 set thread context of 3292 1112 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 536 set thread context of 3040 536 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 68 set thread context of 3836 68 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2792 set thread context of 1120 2792 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 2872 set thread context of 3852 2872 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 1380 set thread context of 3820 1380 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 4144 set thread context of 4176 4144 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 4252 set thread context of 4284 4252 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 4360 set thread context of 4392 4360 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 4456 set thread context of 4488 4456 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 4552 set thread context of 4584 4552 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 4648 set thread context of 4688 4648 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 4752 set thread context of 4784 4752 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 4848 set thread context of 4888 4848 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe PID 4956 set thread context of 4988 4956 4a2827e59e646de4a83818f494796b96.exe RegAsm.exe -
Suspicious use of AdjustPrivilegeToken 380 IoCs
Processes:
4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exeRegAsm.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exeRegAsm.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exedescription pid process Token: SeDebugPrivilege 2976 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 3852 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 3340 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 1984 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 1896 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 3724 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 352 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 1460 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 2000 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 2716 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 3048 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 3212 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 2908 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 1004 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 892 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 1796 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 1576 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 3648 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 2524 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 3104 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 1656 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 2600 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 2596 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 3476 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 2532 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 2644 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 2084 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 2888 RegAsm.exe Token: SeDebugPrivilege 3344 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 2556 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 956 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 664 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 1424 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 1656 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 3324 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 644 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 2052 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 1660 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 1672 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 3212 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 2384 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 3412 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 3136 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 1576 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 1876 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 2792 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 3768 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 3412 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 3456 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 3728 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 1112 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 536 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 68 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 2792 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 2872 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 1380 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 4144 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 3792 RegAsm.exe Token: SeDebugPrivilege 4252 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 4360 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 4456 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 4552 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 4648 4a2827e59e646de4a83818f494796b96.exe Token: SeDebugPrivilege 4752 4a2827e59e646de4a83818f494796b96.exe -
Suspicious behavior: EnumeratesProcesses 105653 IoCs
Processes:
4a2827e59e646de4a83818f494796b96.exepid process 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe 2976 4a2827e59e646de4a83818f494796b96.exe -
Drops startup file 2 IoCs
Processes:
4a2827e59e646de4a83818f494796b96.exe4a2827e59e646de4a83818f494796b96.exedescription ioc process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HJdyTuap.exe 4a2827e59e646de4a83818f494796b96.exe File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HJdyTuap.exe 4a2827e59e646de4a83818f494796b96.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"1⤵
- Suspicious use of WriteProcessMemory
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious behavior: EnumeratesProcesses
- Drops startup file
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"2⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"2⤵
- Suspicious use of WriteProcessMemory
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Drops startup file
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"3⤵
- Suspicious use of WriteProcessMemory
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"4⤵
- Suspicious use of WriteProcessMemory
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"5⤵
- Suspicious use of WriteProcessMemory
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"6⤵
- Suspicious use of WriteProcessMemory
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"7⤵
- Suspicious use of WriteProcessMemory
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"8⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"8⤵
- Suspicious use of WriteProcessMemory
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"9⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"9⤵
- Suspicious use of WriteProcessMemory
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"10⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"10⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"10⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"11⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"11⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"12⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"12⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"13⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"13⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"13⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"14⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"14⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"15⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"15⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"16⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"16⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"17⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"17⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"17⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"18⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"18⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"18⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"19⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"19⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"20⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"20⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"20⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"20⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"21⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"21⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"21⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"21⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"22⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"22⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"23⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"23⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"24⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"24⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"24⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"25⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"25⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"26⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"26⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"27⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"27⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"28⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"28⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"29⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"29⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"30⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"30⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"30⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"31⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"31⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"32⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"32⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"33⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"33⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"33⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"34⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"34⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"35⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"35⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"36⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"36⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"36⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"37⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"37⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"38⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"38⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"39⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"39⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"40⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"40⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"41⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"41⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"42⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"42⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"43⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"43⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"44⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"44⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"45⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"45⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"46⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"46⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"47⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"47⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"48⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"48⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"49⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"49⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"50⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"50⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"51⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"51⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"52⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"52⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"53⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"53⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"54⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"54⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"55⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"55⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"56⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"56⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"57⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"57⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"58⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"58⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"59⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"59⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"60⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"60⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"61⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"61⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"62⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"62⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"62⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"63⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"63⤵
- Suspicious use of SetThreadContext
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"64⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"64⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"64⤵
- Suspicious use of SetThreadContext
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"65⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"65⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"66⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"66⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"66⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"67⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"67⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"67⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"68⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"68⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"69⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"69⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"69⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"69⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"70⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"70⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"71⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"71⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"72⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"72⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"73⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"73⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"74⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"74⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"75⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"75⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"75⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"76⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"76⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"77⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"77⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"77⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"78⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"78⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"79⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"79⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"79⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"80⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"80⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"81⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"81⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"82⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"82⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"83⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"83⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"84⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"84⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"84⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"85⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"85⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"85⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"86⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"86⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"87⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"87⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"88⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"88⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"89⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"89⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"89⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"89⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"90⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"90⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"91⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"91⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"91⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"92⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"92⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"93⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"93⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"94⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"94⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"95⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"95⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"96⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"96⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"96⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"97⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"97⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"98⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"98⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"99⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"99⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"99⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"100⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"100⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"100⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"100⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"101⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"101⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"102⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"102⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"103⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"103⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"104⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"104⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"104⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"105⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"105⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"106⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"106⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"107⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"107⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"108⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"108⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"109⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"109⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"109⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"110⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"110⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"111⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"111⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"112⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"112⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"113⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"113⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"113⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"114⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"114⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"115⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"115⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"115⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"116⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"116⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"117⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"117⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"118⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"118⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"119⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"119⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"120⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"120⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"121⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"121⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"122⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"122⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"123⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"123⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"123⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"124⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"124⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"125⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"125⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"125⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"126⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"126⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"127⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"127⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"127⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"128⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"128⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"129⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"129⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"129⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"130⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"130⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"131⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"131⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"131⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"132⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"132⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"133⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"133⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"133⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"134⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"134⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"134⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"135⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"135⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"136⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"136⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"136⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"137⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"137⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"138⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"138⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"138⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"139⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"139⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"140⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"140⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"141⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"141⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"142⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"142⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"143⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"143⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"144⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"144⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"145⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"145⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"146⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"146⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"147⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"147⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"147⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"148⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"148⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"149⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"149⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"150⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"150⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"151⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"151⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"152⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"152⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"152⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"152⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"152⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"153⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"153⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"154⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"154⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"154⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"155⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"155⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"156⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"156⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"157⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"157⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"158⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"158⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"159⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"159⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"160⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"160⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"161⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"161⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"162⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"162⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"163⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"163⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"164⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"164⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"165⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"165⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"166⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"166⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"167⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"167⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"168⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"168⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"169⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"169⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"170⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"170⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"170⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"171⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"171⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"172⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"172⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"172⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"172⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"172⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"172⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"173⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"173⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"174⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"174⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"175⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"175⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"175⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"176⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"176⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"176⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"177⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"177⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"177⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"178⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"178⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"179⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"179⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"180⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"180⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"181⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"181⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"182⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"182⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"182⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"182⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"183⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"183⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"183⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"184⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"184⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"185⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"185⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"186⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"186⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"187⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"187⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"187⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"188⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"188⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"189⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"189⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"190⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"190⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"191⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"191⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"192⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"192⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"193⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"193⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"194⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"194⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"194⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"195⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"195⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"195⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"196⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"196⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"196⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"197⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"197⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"198⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"198⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"199⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"199⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"199⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"199⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"200⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"200⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"200⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"201⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"201⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"202⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"202⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"203⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"203⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"204⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"204⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"205⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"205⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"206⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"206⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"207⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"207⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"207⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"208⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"208⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"208⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"209⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"209⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"210⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"210⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"210⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"211⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"211⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"212⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"212⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"213⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"213⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"214⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"214⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"214⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"214⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"215⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"215⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"216⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"216⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"216⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"217⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"217⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"217⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"217⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"217⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"218⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"218⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"219⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"219⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"220⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"220⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"221⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"221⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"221⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"222⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"222⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"222⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"223⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"223⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"223⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"224⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"224⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"225⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"225⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"225⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"226⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"226⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"226⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"227⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"227⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"228⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"228⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"229⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"229⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"230⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"230⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"231⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"231⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"232⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"232⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"232⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"233⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"233⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"234⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"234⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"235⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"235⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"236⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"236⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"237⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"237⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"238⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"238⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"238⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"238⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"239⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"239⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"239⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"240⤵
-
C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"C:\Users\Admin\AppData\Local\Temp\4a2827e59e646de4a83818f494796b96.exe"240⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"241⤵