ffd9ef759aa1fbd3370a8410771878b7ae941d0c60c5ce41d705aa18e4e59958

General

Target

REQUIRED UPDATED SOA.pdf.exe
Size

591KB
MD5

ee7673e9718c0ea2c15cc3b75548fea6
SHA1

04fe416ede15f7a0873609fe0660263a6cb7dd95
SHA256

ffd9ef759aa1fbd3370a8410771878b7ae941d0c60c5ce41d705aa18e4e59958
SHA512

5077e3d64e5309eb54d4e1c85b121847d0a038301008e0c0a732303e6be85ebd9e6553c662268530110233babe4f8dce7156c2a58398ca827818892713245328

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082
Creates scheduled task(s) 1 TTPs 1 IoCs
Schtasks is often used by malware for persistence or to perform post-infection execution.
persistence

Scheduled Task
T1053

Processes:

schtasks.exe

pid process

316 schtasks.exe

pid	process
316	schtasks.exe

Suspicious behavior: MapViewOfSection 64 IoCs

Processes:

REQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exe

pid	process
1740	REQUIRED UPDATED SOA.pdf.exe
1740	REQUIRED UPDATED SOA.pdf.exe
1540	REQUIRED UPDATED SOA.pdf.exe
1836	REQUIRED UPDATED SOA.pdf.exe
328	REQUIRED UPDATED SOA.pdf.exe
328	REQUIRED UPDATED SOA.pdf.exe
1664	REQUIRED UPDATED SOA.pdf.exe
1504	REQUIRED UPDATED SOA.pdf.exe
1504	REQUIRED UPDATED SOA.pdf.exe
1192	REQUIRED UPDATED SOA.pdf.exe
1032	REQUIRED UPDATED SOA.pdf.exe
616	REQUIRED UPDATED SOA.pdf.exe
616	REQUIRED UPDATED SOA.pdf.exe
1352	REQUIRED UPDATED SOA.pdf.exe
1352	REQUIRED UPDATED SOA.pdf.exe
1488	REQUIRED UPDATED SOA.pdf.exe
1488	REQUIRED UPDATED SOA.pdf.exe
1756	REQUIRED UPDATED SOA.pdf.exe
756	REQUIRED UPDATED SOA.pdf.exe
1104	REQUIRED UPDATED SOA.pdf.exe
536	REQUIRED UPDATED SOA.pdf.exe
1612	REQUIRED UPDATED SOA.pdf.exe
1964	REQUIRED UPDATED SOA.pdf.exe
1204	REQUIRED UPDATED SOA.pdf.exe
1204	REQUIRED UPDATED SOA.pdf.exe
1848	REQUIRED UPDATED SOA.pdf.exe
1992	REQUIRED UPDATED SOA.pdf.exe
1864	REQUIRED UPDATED SOA.pdf.exe
1724	REQUIRED UPDATED SOA.pdf.exe
396	REQUIRED UPDATED SOA.pdf.exe
1664	REQUIRED UPDATED SOA.pdf.exe
1504	REQUIRED UPDATED SOA.pdf.exe
1192	REQUIRED UPDATED SOA.pdf.exe
524	REQUIRED UPDATED SOA.pdf.exe
616	REQUIRED UPDATED SOA.pdf.exe
952	REQUIRED UPDATED SOA.pdf.exe
816	REQUIRED UPDATED SOA.pdf.exe
1264	REQUIRED UPDATED SOA.pdf.exe
676	REQUIRED UPDATED SOA.pdf.exe
1452	REQUIRED UPDATED SOA.pdf.exe
1616	REQUIRED UPDATED SOA.pdf.exe
1620	REQUIRED UPDATED SOA.pdf.exe
1964	REQUIRED UPDATED SOA.pdf.exe
1244	REQUIRED UPDATED SOA.pdf.exe
1244	REQUIRED UPDATED SOA.pdf.exe
1812	REQUIRED UPDATED SOA.pdf.exe
1800	REQUIRED UPDATED SOA.pdf.exe
1088	REQUIRED UPDATED SOA.pdf.exe
1724	REQUIRED UPDATED SOA.pdf.exe
396	REQUIRED UPDATED SOA.pdf.exe
1520	REQUIRED UPDATED SOA.pdf.exe
1504	REQUIRED UPDATED SOA.pdf.exe
1504	REQUIRED UPDATED SOA.pdf.exe
1528	REQUIRED UPDATED SOA.pdf.exe
1300	REQUIRED UPDATED SOA.pdf.exe
616	REQUIRED UPDATED SOA.pdf.exe
616	REQUIRED UPDATED SOA.pdf.exe
844	REQUIRED UPDATED SOA.pdf.exe
2016	REQUIRED UPDATED SOA.pdf.exe
1264	REQUIRED UPDATED SOA.pdf.exe
1264	REQUIRED UPDATED SOA.pdf.exe
1988	REQUIRED UPDATED SOA.pdf.exe
1776	REQUIRED UPDATED SOA.pdf.exe
1776	REQUIRED UPDATED SOA.pdf.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

REQUIRED UPDATED SOA.pdf.execmd.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exeREQUIRED UPDATED SOA.pdf.exe

description	pid	process	target process
PID 1740 wrote to memory of 2004	1740	REQUIRED UPDATED SOA.pdf.exe	cmd.exe
PID 1740 wrote to memory of 2004	1740	REQUIRED UPDATED SOA.pdf.exe	cmd.exe
PID 1740 wrote to memory of 2004	1740	REQUIRED UPDATED SOA.pdf.exe	cmd.exe
PID 1740 wrote to memory of 2004	1740	REQUIRED UPDATED SOA.pdf.exe	cmd.exe
PID 1740 wrote to memory of 2004	1740	REQUIRED UPDATED SOA.pdf.exe	cmd.exe
PID 1740 wrote to memory of 2004	1740	REQUIRED UPDATED SOA.pdf.exe	cmd.exe
PID 1740 wrote to memory of 2004	1740	REQUIRED UPDATED SOA.pdf.exe	cmd.exe
PID 2004 wrote to memory of 316	2004	cmd.exe	schtasks.exe
PID 2004 wrote to memory of 316	2004	cmd.exe	schtasks.exe
PID 2004 wrote to memory of 316	2004	cmd.exe	schtasks.exe
PID 2004 wrote to memory of 316	2004	cmd.exe	schtasks.exe
PID 2004 wrote to memory of 316	2004	cmd.exe	schtasks.exe
PID 2004 wrote to memory of 316	2004	cmd.exe	schtasks.exe
PID 2004 wrote to memory of 316	2004	cmd.exe	schtasks.exe
PID 1740 wrote to memory of 1996	1740	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1740 wrote to memory of 1996	1740	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1740 wrote to memory of 1996	1740	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1740 wrote to memory of 1996	1740	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1740 wrote to memory of 1996	1740	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1740 wrote to memory of 1996	1740	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1740 wrote to memory of 1996	1740	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1740 wrote to memory of 1996	1740	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1740 wrote to memory of 1540	1740	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 1740 wrote to memory of 1540	1740	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 1740 wrote to memory of 1540	1740	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 1740 wrote to memory of 1540	1740	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 1740 wrote to memory of 1540	1740	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 1740 wrote to memory of 1540	1740	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 1740 wrote to memory of 1540	1740	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 1540 wrote to memory of 1812	1540	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1540 wrote to memory of 1812	1540	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1540 wrote to memory of 1812	1540	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1540 wrote to memory of 1812	1540	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1540 wrote to memory of 1812	1540	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1540 wrote to memory of 1812	1540	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1540 wrote to memory of 1812	1540	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1540 wrote to memory of 1812	1540	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1540 wrote to memory of 1836	1540	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 1540 wrote to memory of 1836	1540	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 1540 wrote to memory of 1836	1540	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 1540 wrote to memory of 1836	1540	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 1540 wrote to memory of 1836	1540	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 1540 wrote to memory of 1836	1540	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 1540 wrote to memory of 1836	1540	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 1836 wrote to memory of 1800	1836	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1836 wrote to memory of 1800	1836	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1836 wrote to memory of 1800	1836	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1836 wrote to memory of 1800	1836	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1836 wrote to memory of 1800	1836	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1836 wrote to memory of 1800	1836	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1836 wrote to memory of 1800	1836	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1836 wrote to memory of 1800	1836	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 1836 wrote to memory of 328	1836	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 1836 wrote to memory of 328	1836	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 1836 wrote to memory of 328	1836	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 1836 wrote to memory of 328	1836	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 1836 wrote to memory of 328	1836	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 1836 wrote to memory of 328	1836	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 1836 wrote to memory of 328	1836	REQUIRED UPDATED SOA.pdf.exe	REQUIRED UPDATED SOA.pdf.exe
PID 328 wrote to memory of 1088	328	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 328 wrote to memory of 1088	328	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 328 wrote to memory of 1088	328	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 328 wrote to memory of 1088	328	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe
PID 328 wrote to memory of 1088	328	REQUIRED UPDATED SOA.pdf.exe	MSBuild.exe

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
1⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:1740

C:\Windows\SysWOW64\cmd.exe
"C:\Windows\System32\cmd.exe" /c schtasks /Create /TN name /XML "C:\Users\Admin\AppData\Local\Temp\a249e9defd4e4abc8bec7fe2e6447734.xml"
2⤵
- Suspicious use of WriteProcessMemory
PID:2004

C:\Windows\SysWOW64\schtasks.exe
schtasks /Create /TN name /XML "C:\Users\Admin\AppData\Local\Temp\a249e9defd4e4abc8bec7fe2e6447734.xml"
3⤵
- Creates scheduled task(s)
PID:316

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
2⤵
PID:1996

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
2⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:1540

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
3⤵
PID:1812

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
3⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:1836

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
4⤵
PID:1800

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
4⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:328

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
5⤵
- Suspicious behavior: MapViewOfSection
PID:1664

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
6⤵
PID:1492

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
6⤵
- Suspicious behavior: MapViewOfSection
PID:1504

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
7⤵
PID:924

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
7⤵
- Suspicious behavior: MapViewOfSection
PID:1192

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
8⤵
PID:1480

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
8⤵
- Suspicious behavior: MapViewOfSection
PID:1032

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
9⤵
PID:820

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
9⤵
- Suspicious behavior: MapViewOfSection
PID:616

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
10⤵
PID:848

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
10⤵
- Suspicious behavior: MapViewOfSection
PID:1352

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
11⤵
PID:1900

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
11⤵
- Suspicious behavior: MapViewOfSection
PID:1488

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
12⤵
PID:1564

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
12⤵
- Suspicious behavior: MapViewOfSection
PID:1756

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
13⤵
PID:516

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
13⤵
- Suspicious behavior: MapViewOfSection
PID:756

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
14⤵
PID:1092

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
14⤵
- Suspicious behavior: MapViewOfSection
PID:1104

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
15⤵
PID:1728

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
15⤵
- Suspicious behavior: MapViewOfSection
PID:536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
16⤵
PID:2000

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
16⤵
- Suspicious behavior: MapViewOfSection
PID:1612

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
17⤵
PID:1772

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
17⤵
- Suspicious behavior: MapViewOfSection
PID:1964

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
18⤵
PID:1996

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
18⤵
- Suspicious behavior: MapViewOfSection
PID:1204

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
19⤵
PID:1804

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
19⤵
- Suspicious behavior: MapViewOfSection
PID:1848

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
20⤵
PID:1424

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
20⤵
- Suspicious behavior: MapViewOfSection
PID:1992

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
21⤵
PID:1868

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
21⤵
- Suspicious behavior: MapViewOfSection
PID:1864

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
22⤵
PID:1808

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
22⤵
- Suspicious behavior: MapViewOfSection
PID:1724

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
23⤵
PID:1784

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
23⤵
- Suspicious behavior: MapViewOfSection
PID:396

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
24⤵
PID:1492

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
24⤵
- Suspicious behavior: MapViewOfSection
PID:1664

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
25⤵
PID:924

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
25⤵
- Suspicious behavior: MapViewOfSection
PID:1504

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
26⤵
PID:1480

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
26⤵
- Suspicious behavior: MapViewOfSection
PID:1192

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
27⤵
PID:820

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
27⤵
- Suspicious behavior: MapViewOfSection
PID:524

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
28⤵
PID:848

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
28⤵
- Suspicious behavior: MapViewOfSection
PID:616

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
29⤵
PID:436

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
29⤵
- Suspicious behavior: MapViewOfSection
PID:952

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
30⤵
PID:1556

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
30⤵
- Suspicious behavior: MapViewOfSection
PID:816

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
31⤵
PID:272

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
31⤵
- Suspicious behavior: MapViewOfSection
PID:1264

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
32⤵
PID:1860

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
32⤵
- Suspicious behavior: MapViewOfSection
PID:676

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
33⤵
PID:1100

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
33⤵
- Suspicious behavior: MapViewOfSection
PID:1452

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
34⤵
PID:1980

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
34⤵
- Suspicious behavior: MapViewOfSection
PID:1616

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
35⤵
PID:1592

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
35⤵
- Suspicious behavior: MapViewOfSection
PID:1620

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
36⤵
PID:1904

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
36⤵
- Suspicious behavior: MapViewOfSection
PID:1964

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
37⤵
PID:1448

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
37⤵
- Suspicious behavior: MapViewOfSection
PID:1244

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
38⤵
PID:1960

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
38⤵
- Suspicious behavior: MapViewOfSection
PID:1812

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
39⤵
PID:1984

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
39⤵
- Suspicious behavior: MapViewOfSection
PID:1800

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
40⤵
PID:1856

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
40⤵
- Suspicious behavior: MapViewOfSection
PID:1088

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
41⤵
PID:1824

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
41⤵
- Suspicious behavior: MapViewOfSection
PID:1724

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
42⤵
PID:576

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
42⤵
- Suspicious behavior: MapViewOfSection
PID:396

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
43⤵
PID:1472

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
43⤵
- Suspicious behavior: MapViewOfSection
PID:1520

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
44⤵
PID:472

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
44⤵
- Suspicious behavior: MapViewOfSection
PID:1504

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
45⤵
PID:340

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
45⤵
- Suspicious behavior: MapViewOfSection
PID:1528

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
46⤵
PID:1032

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
46⤵
- Suspicious behavior: MapViewOfSection
PID:1300

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
47⤵
PID:1760

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
47⤵
- Suspicious behavior: MapViewOfSection
PID:616

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
48⤵
PID:1352

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
48⤵
- Suspicious behavior: MapViewOfSection
PID:844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
49⤵
PID:1020

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
49⤵
- Suspicious behavior: MapViewOfSection
PID:2016

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
50⤵
PID:1084

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
50⤵
- Suspicious behavior: MapViewOfSection
PID:1264

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
51⤵
PID:756

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
51⤵
- Suspicious behavior: MapViewOfSection
PID:1988

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
52⤵
PID:1648

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
52⤵
- Suspicious behavior: MapViewOfSection
PID:1776

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
53⤵
PID:904

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
53⤵
PID:1536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
54⤵
PID:1788

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
54⤵
PID:1620

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
55⤵
PID:1212

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
55⤵
PID:1944

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
56⤵
PID:1740

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
56⤵
PID:1424

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
57⤵
PID:1960

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
57⤵
PID:1244

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
58⤵
PID:1984

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
58⤵
PID:1812

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
59⤵
PID:1872

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
59⤵
PID:1856

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
60⤵
PID:328

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
60⤵
PID:1824

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
61⤵
PID:1080

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
61⤵
PID:576

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
62⤵
PID:924

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
62⤵
PID:1472

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
63⤵
PID:300

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
63⤵
PID:472

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
64⤵
PID:1816

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
64⤵
PID:340

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
65⤵
PID:848

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
65⤵
PID:524

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
66⤵
PID:1064

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
66⤵
PID:436

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
67⤵
PID:1564

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
67⤵
PID:1300

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
68⤵
PID:1352

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
68⤵
PID:988

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
69⤵
PID:816

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
69⤵
PID:1092

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
70⤵
PID:1860

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
70⤵
PID:1084

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
71⤵
PID:1100

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
71⤵
PID:676

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
72⤵
PID:1264

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
72⤵
PID:2000

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
73⤵
PID:1772

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
73⤵
PID:1988

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
74⤵
PID:904

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
74⤵
PID:536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
75⤵
PID:1904

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
75⤵
PID:1788

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
76⤵
PID:1348

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
76⤵
PID:1636

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
77⤵
PID:1804

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
77⤵
PID:1448

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
78⤵
PID:1844

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
78⤵
PID:1944

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
79⤵
PID:1960

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
79⤵
PID:1424

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
80⤵
PID:1832

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
80⤵
PID:1836

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
81⤵
PID:1380

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
81⤵
PID:1872

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
82⤵
PID:1784

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
82⤵
PID:884

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
83⤵
PID:1856

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
83⤵
PID:1088

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
84⤵
PID:1096

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
84⤵
PID:1724

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
85⤵
PID:924

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
85⤵
PID:576

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
86⤵
PID:1216

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
86⤵
PID:1520

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
87⤵
PID:820

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
87⤵
PID:1816

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
88⤵
PID:1504

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
88⤵
PID:848

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
89⤵
PID:1900

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
89⤵
PID:1064

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
90⤵
PID:1760

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
90⤵
PID:1564

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
91⤵
PID:952

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
91⤵
PID:1352

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
92⤵
PID:272

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
92⤵
PID:816

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
93⤵
PID:844

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
93⤵
PID:1860

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
94⤵
PID:1728

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
94⤵
PID:1756

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
95⤵
PID:1980

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
95⤵
PID:756

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
96⤵
PID:1104

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
96⤵
PID:1452

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
97⤵
PID:1876

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
97⤵
PID:1592

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
98⤵
PID:1612

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
98⤵
PID:1776

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
99⤵
PID:912

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
99⤵
PID:1144

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
100⤵
PID:1620

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
100⤵
PID:1212

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
101⤵
PID:1152

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
101⤵
PID:1964

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
102⤵
PID:2004

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
102⤵
PID:1848

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
103⤵
PID:1984

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
103⤵
PID:1992

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
104⤵
PID:1864

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
104⤵
PID:1868

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
105⤵
PID:1800

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
105⤵
PID:1808

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
106⤵
PID:1492

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
106⤵
PID:328

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
107⤵
PID:1824

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
107⤵
PID:432

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
108⤵
PID:1724

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
108⤵
PID:300

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
109⤵
PID:576

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
109⤵
PID:1192

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
110⤵
PID:1520

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
110⤵
PID:744

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
111⤵
PID:1816

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
111⤵
PID:1528

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
112⤵
PID:848

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
112⤵
PID:724

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
113⤵
PID:1064

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
113⤵
PID:516

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
114⤵
PID:1564

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
114⤵
PID:1020

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
115⤵
PID:1352

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
115⤵
PID:868

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
116⤵
PID:816

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
116⤵
PID:1100

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
117⤵
PID:1860

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
117⤵
PID:1264

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
118⤵
PID:1756

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
118⤵
PID:1772

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
119⤵
PID:756

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
119⤵
PID:904

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
120⤵
PID:1452

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
120⤵
PID:1904

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
121⤵
PID:1592

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
121⤵
PID:1348

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
122⤵
PID:1776

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
122⤵
PID:1804

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
123⤵
PID:1144

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
123⤵
PID:1844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
124⤵
PID:1212

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
124⤵
PID:1960

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
125⤵
PID:1964

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
125⤵
PID:1832

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
126⤵
PID:1848

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
126⤵
PID:1380

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
127⤵
PID:1992

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
127⤵
PID:1784

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
128⤵
PID:1868

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
128⤵
PID:1856

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
129⤵
PID:1808

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
129⤵
PID:1096

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
130⤵
PID:328

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
130⤵
PID:876

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
131⤵
PID:552

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
131⤵
PID:960

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
132⤵
PID:948

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
132⤵
PID:396

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
133⤵
PID:432

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
133⤵
PID:1472

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
134⤵
PID:300

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
134⤵
PID:472

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
135⤵
PID:1192

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
135⤵
PID:340

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
136⤵
PID:744

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
136⤵
PID:524

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
137⤵
PID:1528

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
137⤵
PID:436

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
138⤵
PID:724

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
138⤵
PID:1300

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
139⤵
PID:516

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
139⤵
PID:988

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
140⤵
PID:1020

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
140⤵
PID:1092

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
141⤵
PID:868

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
141⤵
PID:2020

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
142⤵
PID:1100

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
142⤵
PID:1648

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
143⤵
PID:1264

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
143⤵
PID:1616

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
144⤵
PID:1772

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
144⤵
PID:1588

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
145⤵
PID:904

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
145⤵
PID:1536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
146⤵
PID:1904

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
146⤵
PID:1204

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
147⤵
PID:1348

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
147⤵
PID:1996

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
148⤵
PID:1620

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
148⤵
PID:1636

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
149⤵
PID:1152

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
149⤵
PID:1448

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
150⤵
PID:2004

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
150⤵
PID:1944

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
151⤵
PID:1984

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
151⤵
PID:1424

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
152⤵
PID:1864

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
152⤵
PID:1836

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
153⤵
PID:1800

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
153⤵
PID:1872

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
154⤵
PID:1492

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
154⤵
PID:884

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
155⤵
PID:1824

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
155⤵
PID:1664

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
156⤵
PID:924

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
156⤵
PID:1656

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
157⤵
PID:972

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
157⤵
PID:1088

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
158⤵
PID:1724

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
158⤵
PID:1216

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
159⤵
PID:576

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
159⤵
PID:820

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
160⤵
PID:1520

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
160⤵
PID:1504

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
161⤵
PID:1816

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
161⤵
PID:1900

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
162⤵
PID:848

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
162⤵
PID:1760

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
163⤵
PID:1064

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
163⤵
PID:952

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
164⤵
PID:1564

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
164⤵
PID:272

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
165⤵
PID:1352

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
165⤵
PID:844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
166⤵
PID:816

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
166⤵
PID:1728

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
167⤵
PID:1860

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
167⤵
PID:1980

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
168⤵
PID:1756

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
168⤵
PID:1104

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
169⤵
PID:756

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
169⤵
PID:1876

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
170⤵
PID:1452

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
170⤵
PID:1612

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
171⤵
PID:1592

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
171⤵
PID:912

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
172⤵
PID:1204

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
172⤵
PID:1804

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
173⤵
PID:1996

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
173⤵
PID:1844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
174⤵
PID:1636

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
174⤵
PID:1960

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
175⤵
PID:1448

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
175⤵
PID:1832

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
176⤵
PID:1944

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
176⤵
PID:1380

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
177⤵
PID:1424

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
177⤵
PID:1784

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
178⤵
PID:1836

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
178⤵
PID:1856

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
179⤵
PID:1872

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
179⤵
PID:1096

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
180⤵
PID:884

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
180⤵
PID:876

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
181⤵
PID:1664

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
181⤵
PID:960

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
182⤵
PID:1656

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
182⤵
PID:396

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
183⤵
PID:1088

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
183⤵
PID:1472

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
184⤵
PID:1216

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
184⤵
PID:472

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
185⤵
PID:820

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
185⤵
PID:340

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
186⤵
PID:1504

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
186⤵
PID:524

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
187⤵
PID:1900

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
187⤵
PID:436

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
188⤵
PID:1760

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
188⤵
PID:1300

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
189⤵
PID:952

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
189⤵
PID:988

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
190⤵
PID:272

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
190⤵
PID:1092

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
191⤵
PID:844

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
191⤵
PID:2020

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
192⤵
PID:1264

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
192⤵
PID:1756

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
193⤵
PID:1772

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
193⤵
PID:756

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
194⤵
PID:904

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
194⤵
PID:1452

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
195⤵
PID:1904

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
195⤵
PID:1592

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
196⤵
PID:1348

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
196⤵
PID:1204

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
197⤵
PID:1740

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
197⤵
PID:1996

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
198⤵
PID:316

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
198⤵
PID:1636

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
199⤵
PID:1540

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
199⤵
PID:1448

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
200⤵
PID:1244

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
200⤵
PID:1944

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
201⤵
PID:1812

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
201⤵
PID:1424

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
202⤵
PID:800

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
202⤵
PID:1836

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
203⤵
PID:1080

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
203⤵
PID:1872

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
204⤵
PID:880

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
204⤵
PID:884

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
205⤵
PID:2036

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
205⤵
PID:1664

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
206⤵
PID:944

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
206⤵
PID:1656

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
207⤵
PID:1480

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
207⤵
PID:300

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
208⤵
PID:396

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
208⤵
PID:1192

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
209⤵
PID:1472

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
209⤵
PID:744

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
210⤵
PID:472

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
210⤵
PID:1528

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
211⤵
PID:340

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
211⤵
PID:724

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
212⤵
PID:524

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
212⤵
PID:516

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
213⤵
PID:436

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
213⤵
PID:1020

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
214⤵
PID:1300

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
214⤵
PID:868

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
215⤵
PID:988

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
215⤵
PID:1100

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
216⤵
PID:1092

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
216⤵
PID:1084

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
217⤵
PID:1516

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
217⤵
PID:824

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
218⤵
PID:1324

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
218⤵
PID:1168

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
219⤵
PID:1680

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
219⤵
PID:1648

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
220⤵
PID:2020

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
220⤵
PID:1616

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
221⤵
PID:1756

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
221⤵
PID:1588

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
222⤵
PID:756

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
222⤵
PID:1536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
223⤵
PID:1452

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
223⤵
PID:1144

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
224⤵
PID:536

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
224⤵
PID:2040

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
225⤵
PID:1740

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
225⤵
PID:1908

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
226⤵
PID:1712

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
226⤵
PID:1964

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
227⤵
PID:1996

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
227⤵
PID:1844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
228⤵
PID:1540

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
228⤵
PID:1636

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
229⤵
PID:1244

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
229⤵
PID:1448

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
230⤵
PID:1812

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
230⤵
PID:1944

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
231⤵
PID:800

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
231⤵
PID:1424

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
232⤵
PID:1080

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
232⤵
PID:1836

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
233⤵
PID:552

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
233⤵
PID:1492

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
234⤵
PID:948

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
234⤵
PID:1824

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
235⤵
PID:432

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
235⤵
PID:924

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
236⤵
PID:1968

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
236⤵
PID:972

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
237⤵
PID:760

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
237⤵
PID:1088

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
238⤵
PID:672

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
238⤵
PID:1216

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
239⤵
PID:632

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
239⤵
PID:820

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
240⤵
PID:1012

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
240⤵
PID:340

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
241⤵
PID:848

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
241⤵
PID:524

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
242⤵
PID:1064

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
242⤵
PID:436

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
243⤵
PID:1564

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
243⤵
PID:1300

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
244⤵
PID:1352

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
244⤵
PID:988

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
245⤵
PID:816

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
245⤵
PID:1092

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
246⤵
PID:1572

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
246⤵
PID:1516

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
247⤵
PID:1328

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
247⤵
PID:1324

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
248⤵
PID:1708

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
248⤵
PID:1680

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
249⤵
PID:1860

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
249⤵
PID:2020

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
250⤵
PID:676

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
250⤵
PID:1756

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
251⤵
PID:2000

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
251⤵
PID:756

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
252⤵
PID:1988

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
252⤵
PID:1452

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
253⤵
PID:992

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
253⤵
PID:536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
254⤵
PID:1212

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
254⤵
PID:1740

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
255⤵
PID:1204

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
255⤵
PID:1712

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
256⤵
PID:1620

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
256⤵
PID:1996

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
257⤵
PID:1848

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
257⤵
PID:1152

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
258⤵
PID:1844

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
258⤵
PID:2004

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
259⤵
PID:1636

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
259⤵
PID:1984

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
260⤵
PID:1448

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
260⤵
PID:1864

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
261⤵
PID:1944

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
261⤵
PID:1800

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
262⤵
PID:1424

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
262⤵
PID:880

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
263⤵
PID:1836

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
263⤵
PID:2036

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
264⤵
PID:1492

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
264⤵
PID:944

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
265⤵
PID:1824

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
265⤵
PID:1480

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
266⤵
PID:924

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
266⤵
PID:396

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
267⤵
PID:972

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
267⤵
PID:1472

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
268⤵
PID:1088

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
268⤵
PID:472

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
269⤵
PID:1216

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
269⤵
PID:1032

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
270⤵
PID:820

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
270⤵
PID:660

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
271⤵
PID:340

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
271⤵
PID:1556

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
272⤵
PID:524

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
272⤵
PID:616

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
273⤵
PID:436

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
273⤵
PID:1488

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
274⤵
PID:1300

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
274⤵
PID:768

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
275⤵
PID:988

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
275⤵
PID:2044

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
276⤵
PID:1092

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
276⤵
PID:1136

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
277⤵
PID:1516

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
277⤵
PID:1916

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
278⤵
PID:1324

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
278⤵
PID:1980

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
279⤵
PID:1680

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
279⤵
PID:1104

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
280⤵
PID:2020

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
280⤵
PID:1876

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
281⤵
PID:1756

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
281⤵
PID:1612

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
282⤵
PID:756

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
282⤵
PID:1592

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
283⤵
PID:1452

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
283⤵
PID:1396

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
284⤵
PID:536

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
284⤵
PID:1804

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
285⤵
PID:1740

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
285⤵
PID:1072

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
286⤵
PID:1712

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
286⤵
PID:796

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
287⤵
PID:1996

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
287⤵
PID:1992

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
288⤵
PID:1540

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
288⤵
PID:1308

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
289⤵
PID:1776

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
289⤵
PID:1636

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
290⤵
PID:1832

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
290⤵
PID:1448

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
291⤵
PID:1380

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
291⤵
PID:1944

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
292⤵
PID:1784

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
292⤵
PID:1424

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
293⤵
PID:1684

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
293⤵
PID:1096

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
294⤵
PID:880

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
294⤵
PID:876

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
295⤵
PID:2036

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
295⤵
PID:960

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
296⤵
PID:944

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
296⤵
PID:1724

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
297⤵
PID:1480

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
297⤵
PID:576

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
298⤵
PID:760

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
298⤵
PID:1520

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
299⤵
PID:1472

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
299⤵
PID:1816

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
300⤵
PID:472

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
300⤵
PID:1528

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
301⤵
PID:1032

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
301⤵
PID:724

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
302⤵
PID:660

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
302⤵
PID:516

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
303⤵
PID:1556

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
303⤵
PID:1020

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
304⤵
PID:616

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
304⤵
PID:868

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
305⤵
PID:1488

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
305⤵
PID:1100

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
306⤵
PID:768

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
306⤵
PID:1084

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
307⤵
PID:2044

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
307⤵
PID:824

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
308⤵
PID:1136

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
308⤵
PID:1168

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
309⤵
PID:1916

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
309⤵
PID:1648

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
310⤵
PID:1980

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
310⤵
PID:1616

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
311⤵
PID:1104

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
311⤵
PID:1588

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
312⤵
PID:1876

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
312⤵
PID:904

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
313⤵
PID:1988

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
313⤵
PID:1780

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
314⤵
PID:1452

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
314⤵
PID:1592

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
315⤵
PID:1348

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
315⤵
PID:536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
316⤵
PID:912

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
316⤵
PID:1740

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
317⤵
PID:1788

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
317⤵
PID:1712

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
318⤵
PID:316

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
318⤵
PID:1996

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
319⤵
PID:1912

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
319⤵
PID:1540

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
320⤵
PID:1960

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
320⤵
PID:1776

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
321⤵
PID:2004

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
321⤵
PID:1832

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
322⤵
PID:1984

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
322⤵
PID:1380

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
323⤵
PID:1864

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
323⤵
PID:1784

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
324⤵
PID:1800

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
324⤵
PID:1684

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
325⤵
PID:552

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
325⤵
PID:880

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
326⤵
PID:948

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
326⤵
PID:2036

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
327⤵
PID:432

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
327⤵
PID:944

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
328⤵
PID:960

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
328⤵
PID:1480

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
329⤵
PID:300

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
329⤵
PID:760

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
330⤵
PID:672

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
330⤵
PID:1472

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
331⤵
PID:632

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
331⤵
PID:472

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
332⤵
PID:1012

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
332⤵
PID:1032

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
333⤵
PID:848

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
333⤵
PID:660

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
334⤵
PID:1064

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
334⤵
PID:1556

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
335⤵
PID:1564

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
335⤵
PID:616

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
336⤵
PID:1352

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
336⤵
PID:1488

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
337⤵
PID:816

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
337⤵
PID:768

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
338⤵
PID:1572

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
338⤵
PID:2044

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
339⤵
PID:1328

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
339⤵
PID:1136

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
340⤵
PID:1708

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
340⤵
PID:1916

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
341⤵
PID:1264

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
341⤵
PID:1680

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
342⤵
PID:1772

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
342⤵
PID:2000

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
343⤵
PID:1360

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
343⤵
PID:1756

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
344⤵
PID:1988

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
344⤵
PID:904

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
345⤵
PID:1452

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
345⤵
PID:1780

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
346⤵
PID:1348

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
346⤵
PID:1592

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
347⤵
PID:912

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
347⤵
PID:536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
348⤵
PID:1788

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
348⤵
PID:1740

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
349⤵
PID:316

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
349⤵
PID:1712

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
350⤵
PID:1912

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
350⤵
PID:1996

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
351⤵
PID:1960

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
351⤵
PID:1540

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
352⤵
PID:2004

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
352⤵
PID:1776

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
353⤵
PID:1984

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
353⤵
PID:1832

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
354⤵
PID:1864

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
354⤵
PID:1380

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
355⤵
PID:1800

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
355⤵
PID:1784

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
356⤵
PID:552

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
356⤵
PID:1684

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
357⤵
PID:948

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
357⤵
PID:880

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
358⤵
PID:432

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
358⤵
PID:2036

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
359⤵
PID:960

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
359⤵
PID:944

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
360⤵
PID:300

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
360⤵
PID:1480

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
361⤵
PID:672

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
361⤵
PID:760

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
362⤵
PID:632

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
362⤵
PID:1472

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
363⤵
PID:1012

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
363⤵
PID:472

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
364⤵
PID:848

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
364⤵
PID:1032

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
365⤵
PID:1064

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
365⤵
PID:660

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
366⤵
PID:1564

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
366⤵
PID:1556

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
367⤵
PID:1352

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
367⤵
PID:616

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
368⤵
PID:816

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
368⤵
PID:1488

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
369⤵
PID:988

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
369⤵
PID:1084

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
370⤵
PID:1092

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
370⤵
PID:824

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
371⤵
PID:1516

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
371⤵
PID:1168

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
372⤵
PID:1324

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
372⤵
PID:676

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
373⤵
PID:1648

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
373⤵
PID:1616

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
374⤵
PID:2020

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
374⤵
PID:756

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
375⤵
PID:1588

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
375⤵
PID:992

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
376⤵
PID:1144

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
376⤵
PID:2040

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
377⤵
PID:1388

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
377⤵
PID:1908

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
378⤵
PID:1396

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
378⤵
PID:1964

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
379⤵
PID:1804

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
379⤵
PID:332

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
380⤵
PID:1072

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
380⤵
PID:1152

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
381⤵
PID:796

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
381⤵
PID:1868

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
382⤵
PID:1992

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
382⤵
PID:1808

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
383⤵
PID:1540

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
383⤵
PID:1244

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
384⤵
PID:1776

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
384⤵
PID:1812

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
385⤵
PID:1832

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
385⤵
PID:800

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
386⤵
PID:1380

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
386⤵
PID:1080

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
387⤵
PID:1784

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
387⤵
PID:1836

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
388⤵
PID:1684

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
388⤵
PID:1492

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
389⤵
PID:880

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
389⤵
PID:1968

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
390⤵
PID:2036

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
390⤵
PID:924

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
391⤵
PID:944

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
391⤵
PID:972

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
392⤵
PID:1480

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
392⤵
PID:1088

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
393⤵
PID:760

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
393⤵
PID:1216

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
394⤵
PID:1816

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
394⤵
PID:820

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
395⤵
PID:472

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
395⤵
PID:340

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
396⤵
PID:1032

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
396⤵
PID:524

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
397⤵
PID:660

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
397⤵
PID:436

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
398⤵
PID:1556

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
398⤵
PID:1196

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
399⤵
PID:868

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
399⤵
PID:1732

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
400⤵
PID:1100

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
400⤵
PID:1328

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
401⤵
PID:1172

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
401⤵
PID:1708

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
402⤵
PID:1568

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
402⤵
PID:1264

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
403⤵
PID:1980

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
403⤵
PID:1772

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
404⤵
PID:1680

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
404⤵
PID:1104

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
405⤵
PID:2000

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
405⤵
PID:1876

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
406⤵
PID:1756

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
406⤵
PID:1536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
407⤵
PID:904

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
407⤵
PID:1904

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
408⤵
PID:1780

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
408⤵
PID:1700

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
409⤵
PID:1592

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
409⤵
PID:1212

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
410⤵
PID:536

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
410⤵
PID:1204

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
411⤵
PID:1740

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
411⤵
PID:1620

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
412⤵
PID:1712

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
412⤵
PID:1848

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
413⤵
PID:1996

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
413⤵
PID:908

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
414⤵
PID:2004

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
414⤵
PID:1540

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
415⤵
PID:1636

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
415⤵
PID:1776

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
416⤵
PID:1448

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
416⤵
PID:1832

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
417⤵
PID:1944

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
417⤵
PID:1380

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
418⤵
PID:1424

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
418⤵
PID:1784

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
419⤵
PID:1096

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
419⤵
PID:1684

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
420⤵
PID:876

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
420⤵
PID:880

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
421⤵
PID:1824

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
421⤵
PID:2036

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
422⤵
PID:1724

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
422⤵
PID:944

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
423⤵
PID:576

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
423⤵
PID:1480

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
424⤵
PID:1520

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
424⤵
PID:760

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
425⤵
PID:1900

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
425⤵
PID:1816

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
426⤵
PID:1528

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
426⤵
PID:472

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
427⤵
PID:724

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
427⤵
PID:1032

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
428⤵
PID:516

C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
428⤵
PID:660

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\REQUIRED UPDATED SOA.pdf.exe"
5⤵
PID:1088

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

1

T1053

Persistence

Scheduled Task

1

T1053

Privilege Escalation

Scheduled Task

1

T1053

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\a249e9defd4e4abc8bec7fe2e6447734.xml
MD5
a035055e1c80bc652520df45650c690f

SHA1
37b8364ad46e17199eb5a7ee89bb506bba384adb

SHA256
2b9948d34674d0fc0f9cb290da8298441b56205f6e341e3cfa1954df42c2b655

SHA512
678279d1bfc8a71c27a5a2c3afa5fd266882a62610863a3e4ebc2489f17827ed4c680c89e6b8b52621320500294d2df9888259ccdc5d38def43e739c1f325fc1

Download Submit
memory/316-5-0x0000000000000000-mapping.dmp

Download
memory/328-12-0x0000000000000000-mapping.dmp

Download
memory/396-88-0x0000000000000000-mapping.dmp

Download
memory/396-50-0x0000000000000000-mapping.dmp

Download
memory/472-130-0x0000000000000000-mapping.dmp

Download
memory/524-58-0x0000000000000000-mapping.dmp

Download
memory/536-34-0x0000000000000000-mapping.dmp

Download
memory/576-126-0x0000000000000000-mapping.dmp

Download
memory/616-22-0x0000000000000000-mapping.dmp

Download
memory/616-60-0x0000000000000000-mapping.dmp

Download
memory/616-98-0x0000000000000000-mapping.dmp

Download
memory/676-68-0x0000000000000000-mapping.dmp

Download
memory/756-30-0x0000000000000000-mapping.dmp

Download
memory/816-64-0x0000000000000000-mapping.dmp

Download
memory/844-100-0x0000000000000000-mapping.dmp

Download
memory/952-62-0x0000000000000000-mapping.dmp

Download
memory/1032-20-0x0000000000000000-mapping.dmp

Download
memory/1088-84-0x0000000000000000-mapping.dmp

Download
memory/1104-32-0x0000000000000000-mapping.dmp

Download
memory/1192-56-0x0000000000000000-mapping.dmp

Download
memory/1192-18-0x0000000000000000-mapping.dmp

Download
memory/1204-40-0x0000000000000000-mapping.dmp

Download
memory/1244-78-0x0000000000000000-mapping.dmp

Download
memory/1244-118-0x0000000000000000-mapping.dmp

Download
memory/1264-66-0x0000000000000000-mapping.dmp

Download
memory/1264-104-0x0000000000000000-mapping.dmp

Download
memory/1300-96-0x0000000000000000-mapping.dmp

Download
memory/1352-24-0x0000000000000000-mapping.dmp

Download
memory/1424-116-0x0000000000000000-mapping.dmp

Download
memory/1452-70-0x0000000000000000-mapping.dmp

Download
memory/1472-128-0x0000000000000000-mapping.dmp

Download
memory/1488-26-0x0000000000000000-mapping.dmp

Download
memory/1504-92-0x0000000000000000-mapping.dmp

Download
memory/1504-54-0x0000000000000000-mapping.dmp

Download
memory/1504-16-0x0000000000000000-mapping.dmp

Download
memory/1520-90-0x0000000000000000-mapping.dmp

Download
memory/1528-94-0x0000000000000000-mapping.dmp

Download
memory/1536-110-0x0000000000000000-mapping.dmp

Download
memory/1540-8-0x0000000000000000-mapping.dmp

Download
memory/1612-36-0x0000000000000000-mapping.dmp

Download
memory/1616-72-0x0000000000000000-mapping.dmp

Download
memory/1620-112-0x0000000000000000-mapping.dmp

Download
memory/1620-74-0x0000000000000000-mapping.dmp

Download
memory/1664-52-0x0000000000000000-mapping.dmp

Download
memory/1664-14-0x0000000000000000-mapping.dmp

Download
memory/1724-86-0x0000000000000000-mapping.dmp

Download
memory/1724-48-0x0000000000000000-mapping.dmp

Download
memory/1740-2-0x00000000766F1000-0x00000000766F3000-memory.dmp

Filesize
8KB

Download
memory/1756-28-0x0000000000000000-mapping.dmp

Download
memory/1776-108-0x0000000000000000-mapping.dmp

Download
memory/1800-82-0x0000000000000000-mapping.dmp

Download
memory/1812-120-0x0000000000000000-mapping.dmp

Download
memory/1812-80-0x0000000000000000-mapping.dmp

Download
memory/1824-124-0x0000000000000000-mapping.dmp

Download
memory/1836-10-0x0000000000000000-mapping.dmp

Download
memory/1848-42-0x0000000000000000-mapping.dmp

Download
memory/1856-122-0x0000000000000000-mapping.dmp

Download
memory/1864-46-0x0000000000000000-mapping.dmp

Download
memory/1944-114-0x0000000000000000-mapping.dmp

Download
memory/1964-76-0x0000000000000000-mapping.dmp

Download
memory/1964-38-0x0000000000000000-mapping.dmp

Download
memory/1988-106-0x0000000000000000-mapping.dmp

Download
memory/1992-44-0x0000000000000000-mapping.dmp

Download
memory/2004-3-0x0000000000000000-mapping.dmp

Download
memory/2016-102-0x0000000000000000-mapping.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads