Analysis
-
max time kernel
151s -
max time network
10s -
platform
windows7_x64 -
resource
win7v20201028 -
submitted
18-01-2021 07:13
Static task
static1
Behavioral task
behavioral1
Sample
REQUIRED UPDATED SOA.pdf.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
REQUIRED UPDATED SOA.pdf.exe
Resource
win10v20201028
General
-
Target
REQUIRED UPDATED SOA.pdf.exe
-
Size
591KB
-
MD5
ee7673e9718c0ea2c15cc3b75548fea6
-
SHA1
04fe416ede15f7a0873609fe0660263a6cb7dd95
-
SHA256
ffd9ef759aa1fbd3370a8410771878b7ae941d0c60c5ce41d705aa18e4e59958
-
SHA512
5077e3d64e5309eb54d4e1c85b121847d0a038301008e0c0a732303e6be85ebd9e6553c662268530110233babe4f8dce7156c2a58398ca827818892713245328
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Creates scheduled task(s) 1 TTPs 1 IoCs
Schtasks is often used by malware for persistence or to perform post-infection execution.
-
Suspicious behavior: MapViewOfSection 64 IoCs
Processes:
REQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exepid process 1740 REQUIRED UPDATED SOA.pdf.exe 1740 REQUIRED UPDATED SOA.pdf.exe 1540 REQUIRED UPDATED SOA.pdf.exe 1836 REQUIRED UPDATED SOA.pdf.exe 328 REQUIRED UPDATED SOA.pdf.exe 328 REQUIRED UPDATED SOA.pdf.exe 1664 REQUIRED UPDATED SOA.pdf.exe 1504 REQUIRED UPDATED SOA.pdf.exe 1504 REQUIRED UPDATED SOA.pdf.exe 1192 REQUIRED UPDATED SOA.pdf.exe 1032 REQUIRED UPDATED SOA.pdf.exe 616 REQUIRED UPDATED SOA.pdf.exe 616 REQUIRED UPDATED SOA.pdf.exe 1352 REQUIRED UPDATED SOA.pdf.exe 1352 REQUIRED UPDATED SOA.pdf.exe 1488 REQUIRED UPDATED SOA.pdf.exe 1488 REQUIRED UPDATED SOA.pdf.exe 1756 REQUIRED UPDATED SOA.pdf.exe 756 REQUIRED UPDATED SOA.pdf.exe 1104 REQUIRED UPDATED SOA.pdf.exe 536 REQUIRED UPDATED SOA.pdf.exe 1612 REQUIRED UPDATED SOA.pdf.exe 1964 REQUIRED UPDATED SOA.pdf.exe 1204 REQUIRED UPDATED SOA.pdf.exe 1204 REQUIRED UPDATED SOA.pdf.exe 1848 REQUIRED UPDATED SOA.pdf.exe 1992 REQUIRED UPDATED SOA.pdf.exe 1864 REQUIRED UPDATED SOA.pdf.exe 1724 REQUIRED UPDATED SOA.pdf.exe 396 REQUIRED UPDATED SOA.pdf.exe 1664 REQUIRED UPDATED SOA.pdf.exe 1504 REQUIRED UPDATED SOA.pdf.exe 1192 REQUIRED UPDATED SOA.pdf.exe 524 REQUIRED UPDATED SOA.pdf.exe 616 REQUIRED UPDATED SOA.pdf.exe 952 REQUIRED UPDATED SOA.pdf.exe 816 REQUIRED UPDATED SOA.pdf.exe 1264 REQUIRED UPDATED SOA.pdf.exe 676 REQUIRED UPDATED SOA.pdf.exe 1452 REQUIRED UPDATED SOA.pdf.exe 1616 REQUIRED UPDATED SOA.pdf.exe 1620 REQUIRED UPDATED SOA.pdf.exe 1964 REQUIRED UPDATED SOA.pdf.exe 1244 REQUIRED UPDATED SOA.pdf.exe 1244 REQUIRED UPDATED SOA.pdf.exe 1812 REQUIRED UPDATED SOA.pdf.exe 1800 REQUIRED UPDATED SOA.pdf.exe 1088 REQUIRED UPDATED SOA.pdf.exe 1724 REQUIRED UPDATED SOA.pdf.exe 396 REQUIRED UPDATED SOA.pdf.exe 1520 REQUIRED UPDATED SOA.pdf.exe 1504 REQUIRED UPDATED SOA.pdf.exe 1504 REQUIRED UPDATED SOA.pdf.exe 1528 REQUIRED UPDATED SOA.pdf.exe 1300 REQUIRED UPDATED SOA.pdf.exe 616 REQUIRED UPDATED SOA.pdf.exe 616 REQUIRED UPDATED SOA.pdf.exe 844 REQUIRED UPDATED SOA.pdf.exe 2016 REQUIRED UPDATED SOA.pdf.exe 1264 REQUIRED UPDATED SOA.pdf.exe 1264 REQUIRED UPDATED SOA.pdf.exe 1988 REQUIRED UPDATED SOA.pdf.exe 1776 REQUIRED UPDATED SOA.pdf.exe 1776 REQUIRED UPDATED SOA.pdf.exe -
Suspicious use of WriteProcessMemory 64 IoCs
Processes:
REQUIRED UPDATED SOA.pdf.execmd.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exedescription pid process target process PID 1740 wrote to memory of 2004 1740 REQUIRED UPDATED SOA.pdf.exe cmd.exe PID 1740 wrote to memory of 2004 1740 REQUIRED UPDATED SOA.pdf.exe cmd.exe PID 1740 wrote to memory of 2004 1740 REQUIRED UPDATED SOA.pdf.exe cmd.exe PID 1740 wrote to memory of 2004 1740 REQUIRED UPDATED SOA.pdf.exe cmd.exe PID 1740 wrote to memory of 2004 1740 REQUIRED UPDATED SOA.pdf.exe cmd.exe PID 1740 wrote to memory of 2004 1740 REQUIRED UPDATED SOA.pdf.exe cmd.exe PID 1740 wrote to memory of 2004 1740 REQUIRED UPDATED SOA.pdf.exe cmd.exe PID 2004 wrote to memory of 316 2004 cmd.exe schtasks.exe PID 2004 wrote to memory of 316 2004 cmd.exe schtasks.exe PID 2004 wrote to memory of 316 2004 cmd.exe schtasks.exe PID 2004 wrote to memory of 316 2004 cmd.exe schtasks.exe PID 2004 wrote to memory of 316 2004 cmd.exe schtasks.exe PID 2004 wrote to memory of 316 2004 cmd.exe schtasks.exe PID 2004 wrote to memory of 316 2004 cmd.exe schtasks.exe PID 1740 wrote to memory of 1996 1740 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1740 wrote to memory of 1996 1740 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1740 wrote to memory of 1996 1740 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1740 wrote to memory of 1996 1740 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1740 wrote to memory of 1996 1740 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1740 wrote to memory of 1996 1740 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1740 wrote to memory of 1996 1740 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1740 wrote to memory of 1996 1740 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1740 wrote to memory of 1540 1740 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 1740 wrote to memory of 1540 1740 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 1740 wrote to memory of 1540 1740 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 1740 wrote to memory of 1540 1740 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 1740 wrote to memory of 1540 1740 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 1740 wrote to memory of 1540 1740 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 1740 wrote to memory of 1540 1740 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 1540 wrote to memory of 1812 1540 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1540 wrote to memory of 1812 1540 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1540 wrote to memory of 1812 1540 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1540 wrote to memory of 1812 1540 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1540 wrote to memory of 1812 1540 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1540 wrote to memory of 1812 1540 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1540 wrote to memory of 1812 1540 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1540 wrote to memory of 1812 1540 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1540 wrote to memory of 1836 1540 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 1540 wrote to memory of 1836 1540 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 1540 wrote to memory of 1836 1540 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 1540 wrote to memory of 1836 1540 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 1540 wrote to memory of 1836 1540 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 1540 wrote to memory of 1836 1540 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 1540 wrote to memory of 1836 1540 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 1836 wrote to memory of 1800 1836 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1836 wrote to memory of 1800 1836 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1836 wrote to memory of 1800 1836 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1836 wrote to memory of 1800 1836 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1836 wrote to memory of 1800 1836 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1836 wrote to memory of 1800 1836 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1836 wrote to memory of 1800 1836 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1836 wrote to memory of 1800 1836 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 1836 wrote to memory of 328 1836 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 1836 wrote to memory of 328 1836 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 1836 wrote to memory of 328 1836 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 1836 wrote to memory of 328 1836 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 1836 wrote to memory of 328 1836 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 1836 wrote to memory of 328 1836 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 1836 wrote to memory of 328 1836 REQUIRED UPDATED SOA.pdf.exe REQUIRED UPDATED SOA.pdf.exe PID 328 wrote to memory of 1088 328 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 328 wrote to memory of 1088 328 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 328 wrote to memory of 1088 328 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 328 wrote to memory of 1088 328 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe PID 328 wrote to memory of 1088 328 REQUIRED UPDATED SOA.pdf.exe MSBuild.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"1⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:1740 -
C:\Windows\SysWOW64\cmd.exe"C:\Windows\System32\cmd.exe" /c schtasks /Create /TN name /XML "C:\Users\Admin\AppData\Local\Temp\a249e9defd4e4abc8bec7fe2e6447734.xml"2⤵
- Suspicious use of WriteProcessMemory
PID:2004 -
C:\Windows\SysWOW64\schtasks.exeschtasks /Create /TN name /XML "C:\Users\Admin\AppData\Local\Temp\a249e9defd4e4abc8bec7fe2e6447734.xml"3⤵
- Creates scheduled task(s)
PID:316
-
-
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"2⤵PID:1996
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"2⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:1540 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"3⤵PID:1812
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"3⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:1836 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"4⤵PID:1800
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"4⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:328 -
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"5⤵
- Suspicious behavior: MapViewOfSection
PID:1664 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"6⤵PID:1492
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"6⤵
- Suspicious behavior: MapViewOfSection
PID:1504 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"7⤵PID:924
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"7⤵
- Suspicious behavior: MapViewOfSection
PID:1192 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"8⤵PID:1480
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"8⤵
- Suspicious behavior: MapViewOfSection
PID:1032 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"9⤵PID:820
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"9⤵
- Suspicious behavior: MapViewOfSection
PID:616 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"10⤵PID:848
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"10⤵
- Suspicious behavior: MapViewOfSection
PID:1352 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"11⤵PID:1900
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"11⤵
- Suspicious behavior: MapViewOfSection
PID:1488 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"12⤵PID:1564
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"12⤵
- Suspicious behavior: MapViewOfSection
PID:1756 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"13⤵PID:516
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"13⤵
- Suspicious behavior: MapViewOfSection
PID:756 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"14⤵PID:1092
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"14⤵
- Suspicious behavior: MapViewOfSection
PID:1104 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"15⤵PID:1728
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"15⤵
- Suspicious behavior: MapViewOfSection
PID:536 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"16⤵PID:2000
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"16⤵
- Suspicious behavior: MapViewOfSection
PID:1612 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"17⤵PID:1772
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"17⤵
- Suspicious behavior: MapViewOfSection
PID:1964 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"18⤵PID:1996
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"18⤵
- Suspicious behavior: MapViewOfSection
PID:1204 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"19⤵PID:1804
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"19⤵
- Suspicious behavior: MapViewOfSection
PID:1848 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"20⤵PID:1424
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"20⤵
- Suspicious behavior: MapViewOfSection
PID:1992 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"21⤵PID:1868
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"21⤵
- Suspicious behavior: MapViewOfSection
PID:1864 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"22⤵PID:1808
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"22⤵
- Suspicious behavior: MapViewOfSection
PID:1724 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"23⤵PID:1784
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"23⤵
- Suspicious behavior: MapViewOfSection
PID:396 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"24⤵PID:1492
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"24⤵
- Suspicious behavior: MapViewOfSection
PID:1664 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"25⤵PID:924
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"25⤵
- Suspicious behavior: MapViewOfSection
PID:1504 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"26⤵PID:1480
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"26⤵
- Suspicious behavior: MapViewOfSection
PID:1192 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"27⤵PID:820
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"27⤵
- Suspicious behavior: MapViewOfSection
PID:524 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"28⤵PID:848
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"28⤵
- Suspicious behavior: MapViewOfSection
PID:616 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"29⤵PID:436
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"29⤵
- Suspicious behavior: MapViewOfSection
PID:952 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"30⤵PID:1556
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"30⤵
- Suspicious behavior: MapViewOfSection
PID:816 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"31⤵PID:272
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"31⤵
- Suspicious behavior: MapViewOfSection
PID:1264 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"32⤵PID:1860
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"32⤵
- Suspicious behavior: MapViewOfSection
PID:676 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"33⤵PID:1100
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"33⤵
- Suspicious behavior: MapViewOfSection
PID:1452 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"34⤵PID:1980
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"34⤵
- Suspicious behavior: MapViewOfSection
PID:1616 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"35⤵PID:1592
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"35⤵
- Suspicious behavior: MapViewOfSection
PID:1620 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"36⤵PID:1904
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"36⤵
- Suspicious behavior: MapViewOfSection
PID:1964 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"37⤵PID:1448
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"37⤵
- Suspicious behavior: MapViewOfSection
PID:1244 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"38⤵PID:1960
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"38⤵
- Suspicious behavior: MapViewOfSection
PID:1812 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"39⤵PID:1984
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"39⤵
- Suspicious behavior: MapViewOfSection
PID:1800 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"40⤵PID:1856
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"40⤵
- Suspicious behavior: MapViewOfSection
PID:1088 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"41⤵PID:1824
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"41⤵
- Suspicious behavior: MapViewOfSection
PID:1724 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"42⤵PID:576
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"42⤵
- Suspicious behavior: MapViewOfSection
PID:396 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"43⤵PID:1472
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"43⤵
- Suspicious behavior: MapViewOfSection
PID:1520 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"44⤵PID:472
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"44⤵
- Suspicious behavior: MapViewOfSection
PID:1504 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"45⤵PID:340
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"45⤵
- Suspicious behavior: MapViewOfSection
PID:1528 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"46⤵PID:1032
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"46⤵
- Suspicious behavior: MapViewOfSection
PID:1300 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"47⤵PID:1760
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"47⤵
- Suspicious behavior: MapViewOfSection
PID:616 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"48⤵PID:1352
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"48⤵
- Suspicious behavior: MapViewOfSection
PID:844 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"49⤵PID:1020
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"49⤵
- Suspicious behavior: MapViewOfSection
PID:2016 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"50⤵PID:1084
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"50⤵
- Suspicious behavior: MapViewOfSection
PID:1264 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"51⤵PID:756
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"51⤵
- Suspicious behavior: MapViewOfSection
PID:1988 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"52⤵PID:1648
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"52⤵
- Suspicious behavior: MapViewOfSection
PID:1776 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"53⤵PID:904
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"53⤵PID:1536
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"54⤵PID:1788
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"54⤵PID:1620
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"55⤵PID:1212
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"55⤵PID:1944
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"56⤵PID:1740
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"56⤵PID:1424
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"57⤵PID:1960
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"57⤵PID:1244
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"58⤵PID:1984
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"58⤵PID:1812
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"59⤵PID:1872
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"59⤵PID:1856
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"60⤵PID:328
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"60⤵PID:1824
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"61⤵PID:1080
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"61⤵PID:576
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"62⤵PID:924
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"62⤵PID:1472
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"63⤵PID:300
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"63⤵PID:472
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"64⤵PID:1816
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"64⤵PID:340
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"65⤵PID:848
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"65⤵PID:524
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"66⤵PID:1064
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"66⤵PID:436
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"67⤵PID:1564
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"67⤵PID:1300
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"68⤵PID:1352
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"68⤵PID:988
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"69⤵PID:816
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"69⤵PID:1092
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"70⤵PID:1860
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"70⤵PID:1084
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"71⤵PID:1100
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"71⤵PID:676
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"72⤵PID:1264
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"72⤵PID:2000
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"73⤵PID:1772
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"73⤵PID:1988
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"74⤵PID:904
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"74⤵PID:536
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"75⤵PID:1904
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"75⤵PID:1788
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"76⤵PID:1348
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"76⤵PID:1636
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"77⤵PID:1804
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"77⤵PID:1448
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"78⤵PID:1844
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"78⤵PID:1944
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"79⤵PID:1960
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"79⤵PID:1424
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"80⤵PID:1832
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"80⤵PID:1836
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"81⤵PID:1380
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"81⤵PID:1872
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"82⤵PID:1784
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"82⤵PID:884
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"83⤵PID:1856
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"83⤵PID:1088
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"84⤵PID:1096
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"84⤵PID:1724
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"85⤵PID:924
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"85⤵PID:576
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"86⤵PID:1216
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"86⤵PID:1520
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"87⤵PID:820
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"87⤵PID:1816
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"88⤵PID:1504
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"88⤵PID:848
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"89⤵PID:1900
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"89⤵PID:1064
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"90⤵PID:1760
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"90⤵PID:1564
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"91⤵PID:952
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"91⤵PID:1352
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"92⤵PID:272
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"92⤵PID:816
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"93⤵PID:844
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"93⤵PID:1860
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"94⤵PID:1728
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"94⤵PID:1756
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"95⤵PID:1980
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"95⤵PID:756
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"96⤵PID:1104
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"96⤵PID:1452
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"97⤵PID:1876
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"97⤵PID:1592
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"98⤵PID:1612
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"98⤵PID:1776
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"99⤵PID:912
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"99⤵PID:1144
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"100⤵PID:1620
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"100⤵PID:1212
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"101⤵PID:1152
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"101⤵PID:1964
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"102⤵PID:2004
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"102⤵PID:1848
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"103⤵PID:1984
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"103⤵PID:1992
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"104⤵PID:1864
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"104⤵PID:1868
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"105⤵PID:1800
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"105⤵PID:1808
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"106⤵PID:1492
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"106⤵PID:328
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"107⤵PID:1824
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"107⤵PID:432
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"108⤵PID:1724
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"108⤵PID:300
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"109⤵PID:576
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"109⤵PID:1192
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"110⤵PID:1520
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"110⤵PID:744
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"111⤵PID:1816
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"111⤵PID:1528
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"112⤵PID:848
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"112⤵PID:724
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"113⤵PID:1064
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"113⤵PID:516
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"114⤵PID:1564
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"114⤵PID:1020
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"115⤵PID:1352
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"115⤵PID:868
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"116⤵PID:816
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"116⤵PID:1100
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"117⤵PID:1860
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"117⤵PID:1264
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"118⤵PID:1756
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"118⤵PID:1772
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"119⤵PID:756
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"119⤵PID:904
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"120⤵PID:1452
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"120⤵PID:1904
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"121⤵PID:1592
-
-
C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"121⤵PID:1348
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"122⤵PID:1776
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-