9a654036705d1183d6d86f20b3124a1c3e03034286391311b66034130f7ed645

General

Target

259828bb5f45d915f7b9b28867e46724.exe
Size

447KB
MD5

259828bb5f45d915f7b9b28867e46724
SHA1

e53f6dcc0e057a6d3f871bfcaea3046caf514bbe
SHA256

9a654036705d1183d6d86f20b3124a1c3e03034286391311b66034130f7ed645
SHA512

aaff6a93d9ca0921b6c4e35bde83e8a0b55f34b2b8552a950a508ab7291d0adf403f4af8c9dbb3fc02ef5aa70ffac9630ca703291c780eaaaff00065949b511e

Score

1^/10

Malware Config

Signatures

Creates scheduled task(s) 1 TTPs 1 IoCs
Schtasks is often used by malware for persistence or to perform post-infection execution.
persistence

Scheduled Task
T1053

Processes:

schtasks.exe

pid process

2000 schtasks.exe

pid	process
2000	schtasks.exe

Suspicious behavior: MapViewOfSection 64 IoCs

Processes:

259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe

pid	process
1740	259828bb5f45d915f7b9b28867e46724.exe
1244	259828bb5f45d915f7b9b28867e46724.exe
1876	259828bb5f45d915f7b9b28867e46724.exe
1788	259828bb5f45d915f7b9b28867e46724.exe
1808	259828bb5f45d915f7b9b28867e46724.exe
1808	259828bb5f45d915f7b9b28867e46724.exe
1944	259828bb5f45d915f7b9b28867e46724.exe
1608	259828bb5f45d915f7b9b28867e46724.exe
1608	259828bb5f45d915f7b9b28867e46724.exe
1652	259828bb5f45d915f7b9b28867e46724.exe
1652	259828bb5f45d915f7b9b28867e46724.exe
1644	259828bb5f45d915f7b9b28867e46724.exe
1796	259828bb5f45d915f7b9b28867e46724.exe
1784	259828bb5f45d915f7b9b28867e46724.exe
1688	259828bb5f45d915f7b9b28867e46724.exe
1668	259828bb5f45d915f7b9b28867e46724.exe
1672	259828bb5f45d915f7b9b28867e46724.exe
1672	259828bb5f45d915f7b9b28867e46724.exe
1480	259828bb5f45d915f7b9b28867e46724.exe
1708	259828bb5f45d915f7b9b28867e46724.exe
272	259828bb5f45d915f7b9b28867e46724.exe
1728	259828bb5f45d915f7b9b28867e46724.exe
1728	259828bb5f45d915f7b9b28867e46724.exe
1648	259828bb5f45d915f7b9b28867e46724.exe
1648	259828bb5f45d915f7b9b28867e46724.exe
1328	259828bb5f45d915f7b9b28867e46724.exe
1328	259828bb5f45d915f7b9b28867e46724.exe
1964	259828bb5f45d915f7b9b28867e46724.exe
1964	259828bb5f45d915f7b9b28867e46724.exe
1540	259828bb5f45d915f7b9b28867e46724.exe
1448	259828bb5f45d915f7b9b28867e46724.exe
1832	259828bb5f45d915f7b9b28867e46724.exe
1872	259828bb5f45d915f7b9b28867e46724.exe
1872	259828bb5f45d915f7b9b28867e46724.exe
1780	259828bb5f45d915f7b9b28867e46724.exe
1616	259828bb5f45d915f7b9b28867e46724.exe
1596	259828bb5f45d915f7b9b28867e46724.exe
1640	259828bb5f45d915f7b9b28867e46724.exe
1552	259828bb5f45d915f7b9b28867e46724.exe
1724	259828bb5f45d915f7b9b28867e46724.exe
1724	259828bb5f45d915f7b9b28867e46724.exe
884	259828bb5f45d915f7b9b28867e46724.exe
1096	259828bb5f45d915f7b9b28867e46724.exe
268	259828bb5f45d915f7b9b28867e46724.exe
436	259828bb5f45d915f7b9b28867e46724.exe
436	259828bb5f45d915f7b9b28867e46724.exe
844	259828bb5f45d915f7b9b28867e46724.exe
684	259828bb5f45d915f7b9b28867e46724.exe
1092	259828bb5f45d915f7b9b28867e46724.exe
1992	259828bb5f45d915f7b9b28867e46724.exe
1980	259828bb5f45d915f7b9b28867e46724.exe
1964	259828bb5f45d915f7b9b28867e46724.exe
1540	259828bb5f45d915f7b9b28867e46724.exe
1448	259828bb5f45d915f7b9b28867e46724.exe
1832	259828bb5f45d915f7b9b28867e46724.exe
1872	259828bb5f45d915f7b9b28867e46724.exe
1780	259828bb5f45d915f7b9b28867e46724.exe
1616	259828bb5f45d915f7b9b28867e46724.exe
1596	259828bb5f45d915f7b9b28867e46724.exe
1544	259828bb5f45d915f7b9b28867e46724.exe
1544	259828bb5f45d915f7b9b28867e46724.exe
1552	259828bb5f45d915f7b9b28867e46724.exe
796	259828bb5f45d915f7b9b28867e46724.exe
884	259828bb5f45d915f7b9b28867e46724.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

259828bb5f45d915f7b9b28867e46724.execmd.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe259828bb5f45d915f7b9b28867e46724.exe

description	pid	process	target process
PID 1740 wrote to memory of 1448	1740	259828bb5f45d915f7b9b28867e46724.exe	cmd.exe
PID 1740 wrote to memory of 1448	1740	259828bb5f45d915f7b9b28867e46724.exe	cmd.exe
PID 1740 wrote to memory of 1448	1740	259828bb5f45d915f7b9b28867e46724.exe	cmd.exe
PID 1740 wrote to memory of 1448	1740	259828bb5f45d915f7b9b28867e46724.exe	cmd.exe
PID 1448 wrote to memory of 2000	1448	cmd.exe	schtasks.exe
PID 1448 wrote to memory of 2000	1448	cmd.exe	schtasks.exe
PID 1448 wrote to memory of 2000	1448	cmd.exe	schtasks.exe
PID 1448 wrote to memory of 2000	1448	cmd.exe	schtasks.exe
PID 1740 wrote to memory of 2004	1740	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1740 wrote to memory of 2004	1740	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1740 wrote to memory of 2004	1740	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1740 wrote to memory of 2004	1740	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1740 wrote to memory of 2004	1740	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1740 wrote to memory of 1244	1740	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1740 wrote to memory of 1244	1740	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1740 wrote to memory of 1244	1740	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1740 wrote to memory of 1244	1740	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1244 wrote to memory of 1960	1244	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1244 wrote to memory of 1960	1244	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1244 wrote to memory of 1960	1244	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1244 wrote to memory of 1960	1244	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1244 wrote to memory of 1960	1244	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1244 wrote to memory of 1876	1244	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1244 wrote to memory of 1876	1244	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1244 wrote to memory of 1876	1244	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1244 wrote to memory of 1876	1244	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1876 wrote to memory of 1540	1876	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1876 wrote to memory of 1540	1876	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1876 wrote to memory of 1540	1876	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1876 wrote to memory of 1540	1876	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1876 wrote to memory of 1540	1876	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1876 wrote to memory of 1788	1876	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1876 wrote to memory of 1788	1876	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1876 wrote to memory of 1788	1876	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1876 wrote to memory of 1788	1876	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1788 wrote to memory of 1832	1788	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1788 wrote to memory of 1832	1788	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1788 wrote to memory of 1832	1788	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1788 wrote to memory of 1832	1788	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1788 wrote to memory of 1832	1788	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1788 wrote to memory of 1808	1788	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1788 wrote to memory of 1808	1788	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1788 wrote to memory of 1808	1788	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1788 wrote to memory of 1808	1788	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1808 wrote to memory of 1872	1808	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1808 wrote to memory of 1872	1808	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1808 wrote to memory of 1872	1808	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1808 wrote to memory of 1872	1808	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1808 wrote to memory of 1872	1808	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1808 wrote to memory of 1944	1808	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1808 wrote to memory of 1944	1808	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1808 wrote to memory of 1944	1808	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1808 wrote to memory of 1944	1808	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1944 wrote to memory of 1780	1944	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1944 wrote to memory of 1780	1944	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1944 wrote to memory of 1780	1944	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1944 wrote to memory of 1780	1944	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1944 wrote to memory of 1780	1944	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1944 wrote to memory of 1608	1944	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1944 wrote to memory of 1608	1944	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1944 wrote to memory of 1608	1944	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1944 wrote to memory of 1608	1944	259828bb5f45d915f7b9b28867e46724.exe	259828bb5f45d915f7b9b28867e46724.exe
PID 1608 wrote to memory of 1636	1608	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe
PID 1608 wrote to memory of 1636	1608	259828bb5f45d915f7b9b28867e46724.exe	MSBuild.exe

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
1⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:1740

C:\Windows\SysWOW64\cmd.exe
cmd /c schtasks /Create /TN name /XML "C:\Users\Admin\AppData\Local\Temp\64a93f59b5894fd5b0d60f9f52db3822.xml"
2⤵
- Suspicious use of WriteProcessMemory
PID:1448

C:\Windows\SysWOW64\schtasks.exe
schtasks /Create /TN name /XML "C:\Users\Admin\AppData\Local\Temp\64a93f59b5894fd5b0d60f9f52db3822.xml"
3⤵
- Creates scheduled task(s)
PID:2000

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
2⤵
PID:2004

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
2⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:1244

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
3⤵
PID:1960

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
3⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:1876

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
4⤵
PID:1540

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
4⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:1788

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
5⤵
PID:1832

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
5⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:1808

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
6⤵
PID:1872

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
6⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:1944

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
7⤵
PID:1780

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
7⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:1608

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
8⤵
PID:1636

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
8⤵
- Suspicious behavior: MapViewOfSection
PID:1652

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
9⤵
PID:1632

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
9⤵
- Suspicious behavior: MapViewOfSection
PID:1644

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
10⤵
PID:1748

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
10⤵
- Suspicious behavior: MapViewOfSection
PID:1796

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
11⤵
PID:800

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
11⤵
- Suspicious behavior: MapViewOfSection
PID:1784

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
12⤵
PID:344

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
12⤵
- Suspicious behavior: MapViewOfSection
PID:1688

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
13⤵
PID:308

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
13⤵
- Suspicious behavior: MapViewOfSection
PID:1668

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
14⤵
PID:1096

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
14⤵
- Suspicious behavior: MapViewOfSection
PID:1672

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
15⤵
PID:268

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
15⤵
- Suspicious behavior: MapViewOfSection
PID:1480

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
16⤵
PID:436

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
16⤵
- Suspicious behavior: MapViewOfSection
PID:1708

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
17⤵
PID:844

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
17⤵
- Suspicious behavior: MapViewOfSection
PID:272

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
18⤵
- Suspicious behavior: MapViewOfSection
PID:1728

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
19⤵
PID:1104

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
19⤵
- Suspicious behavior: MapViewOfSection
PID:1648

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
20⤵
PID:1100

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
20⤵
- Suspicious behavior: MapViewOfSection
PID:1328

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
21⤵
PID:1904

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
21⤵
- Suspicious behavior: MapViewOfSection
PID:1964

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
22⤵
PID:1536

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
22⤵
- Suspicious behavior: MapViewOfSection
PID:1540

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
23⤵
PID:2000

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
23⤵
- Suspicious behavior: MapViewOfSection
PID:1448

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
24⤵
PID:1812

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
24⤵
- Suspicious behavior: MapViewOfSection
PID:1832

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
25⤵
PID:1864

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
25⤵
- Suspicious behavior: MapViewOfSection
PID:1872

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
26⤵
PID:1768

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
26⤵
- Suspicious behavior: MapViewOfSection
PID:1780

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
27⤵
PID:1612

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
27⤵
- Suspicious behavior: MapViewOfSection
PID:1616

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
28⤵
PID:1684

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
28⤵
- Suspicious behavior: MapViewOfSection
PID:1596

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
29⤵
PID:1608

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
29⤵
- Suspicious behavior: MapViewOfSection
PID:1640

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
30⤵
PID:1600

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
30⤵
- Suspicious behavior: MapViewOfSection
PID:1552

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
31⤵
PID:328

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
31⤵
- Suspicious behavior: MapViewOfSection
PID:1724

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
18⤵
PID:1264

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
1⤵
- Suspicious behavior: MapViewOfSection
PID:884

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
2⤵
PID:1692

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
2⤵
- Suspicious behavior: MapViewOfSection
PID:1096

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
3⤵
PID:432

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
3⤵
- Suspicious behavior: MapViewOfSection
PID:268

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
4⤵
PID:340

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
4⤵
- Suspicious behavior: MapViewOfSection
PID:436

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
5⤵
PID:1556

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
5⤵
- Suspicious behavior: MapViewOfSection
PID:844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
6⤵
PID:516

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
6⤵
- Suspicious behavior: MapViewOfSection
PID:684

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
7⤵
PID:1380

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
7⤵
- Suspicious behavior: MapViewOfSection
PID:1092

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
8⤵
PID:2012

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
8⤵
- Suspicious behavior: MapViewOfSection
PID:1992

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
9⤵
PID:1200

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
9⤵
- Suspicious behavior: MapViewOfSection
PID:1980

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
10⤵
PID:1536

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
10⤵
- Suspicious behavior: MapViewOfSection
PID:1964

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
11⤵
PID:2000

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
11⤵
- Suspicious behavior: MapViewOfSection
PID:1540

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
12⤵
PID:1812

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
12⤵
- Suspicious behavior: MapViewOfSection
PID:1448

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
13⤵
PID:1864

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
13⤵
- Suspicious behavior: MapViewOfSection
PID:1832

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
14⤵
PID:1768

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
14⤵
- Suspicious behavior: MapViewOfSection
PID:1872

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
15⤵
PID:1612

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
15⤵
- Suspicious behavior: MapViewOfSection
PID:1780

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
16⤵
PID:1684

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
16⤵
- Suspicious behavior: MapViewOfSection
PID:1616

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
17⤵
PID:1608

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
17⤵
- Suspicious behavior: MapViewOfSection
PID:1596

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
18⤵
PID:1652

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
18⤵
- Suspicious behavior: MapViewOfSection
PID:1544

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
19⤵
PID:328

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
19⤵
- Suspicious behavior: MapViewOfSection
PID:1552

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
20⤵
PID:644

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
20⤵
- Suspicious behavior: MapViewOfSection
PID:796

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
21⤵
PID:1692

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
21⤵
- Suspicious behavior: MapViewOfSection
PID:884

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
22⤵
PID:432

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
22⤵
PID:1096

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
23⤵
PID:340

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
23⤵
PID:268

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
24⤵
PID:1556

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
24⤵
PID:436

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
25⤵
PID:272

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
25⤵
PID:1564

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
26⤵
PID:1728

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
26⤵
PID:1860

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
27⤵
PID:536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
28⤵
PID:1328

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
28⤵
PID:1740

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
29⤵
PID:1960

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
29⤵
PID:316

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
30⤵
PID:1996

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
30⤵
PID:1984

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
31⤵
PID:1848

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
31⤵
PID:1876

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
32⤵
PID:1804

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
32⤵
PID:1788

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
33⤵
PID:1856

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
33⤵
PID:1808

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
34⤵
PID:1620

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
34⤵
PID:1612

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
35⤵
PID:1872

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
35⤵
PID:1776

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
36⤵
PID:1772

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
36⤵
PID:1376

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
37⤵
PID:1608

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
37⤵
PID:1616

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
38⤵
PID:1640

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
38⤵
PID:1748

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
39⤵
PID:800

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
39⤵
PID:328

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
40⤵
PID:1544

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
40⤵
PID:1724

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
41⤵
PID:344

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
41⤵
PID:1688

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
42⤵
PID:1692

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
42⤵
PID:796

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
43⤵
PID:1088

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
43⤵
PID:1668

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
44⤵
PID:1760

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
44⤵
PID:340

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
45⤵
PID:1096

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
45⤵
PID:1816

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
46⤵
PID:1480

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
46⤵
PID:1300

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
47⤵
PID:272

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
47⤵
PID:436

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
48⤵
PID:1380

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
48⤵
PID:844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
49⤵
PID:2012

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
49⤵
PID:684

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
50⤵
PID:1100

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
50⤵
PID:1200

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
51⤵
PID:1092

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
51⤵
PID:1868

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
52⤵
PID:1960

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
52⤵
PID:1740

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
53⤵
PID:2000

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
53⤵
PID:1980

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
54⤵
PID:1836

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
54⤵
PID:1848

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
55⤵
PID:1984

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
55⤵
PID:1864

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
56⤵
PID:1540

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
56⤵
PID:1764

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
57⤵
PID:1856

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
57⤵
PID:1788

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
58⤵
PID:1620

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
58⤵
PID:1808

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
59⤵
PID:1872

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
59⤵
PID:1612

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
60⤵
PID:1772

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
60⤵
PID:1776

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
61⤵
PID:1608

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
61⤵
PID:1376

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
62⤵
PID:1640

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
62⤵
PID:1616

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
63⤵
PID:800

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
63⤵
PID:1748

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
64⤵
PID:1544

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
64⤵
PID:328

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
65⤵
PID:344

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
65⤵
PID:1724

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
66⤵
PID:1692

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
66⤵
PID:1688

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
67⤵
PID:1088

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
67⤵
PID:796

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
68⤵
PID:1760

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
68⤵
PID:1668

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
69⤵
PID:1096

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
69⤵
PID:340

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
70⤵
PID:1480

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
70⤵
PID:1816

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
71⤵
PID:272

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
71⤵
PID:1300

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
72⤵
PID:1380

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
72⤵
PID:436

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
73⤵
PID:2012

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
73⤵
PID:844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
74⤵
PID:1860

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
74⤵
PID:536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
75⤵
PID:1328

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
75⤵
PID:1992

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
76⤵
PID:1536

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
76⤵
PID:1996

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
77⤵
PID:1204

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
77⤵
PID:1812

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
78⤵
PID:316

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
78⤵
PID:1844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
79⤵
PID:1964

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
79⤵
PID:1876

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
80⤵
PID:1804

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
80⤵
PID:1448

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
81⤵
PID:1768

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
81⤵
PID:1832

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
82⤵
PID:1792

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
82⤵
PID:1944

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
83⤵
PID:1592

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
83⤵
PID:1684

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
84⤵
PID:1780

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
84⤵
PID:1636

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
85⤵
PID:1840

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
85⤵
PID:1600

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
86⤵
PID:1652

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
86⤵
PID:1596

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
87⤵
PID:1644

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
87⤵
PID:1800

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
88⤵
PID:920

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
88⤵
PID:644

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
89⤵
PID:1552

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
89⤵
PID:1784

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
90⤵
PID:1796

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
90⤵
PID:332

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
91⤵
PID:432

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
91⤵
PID:884

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
92⤵
PID:1080

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
92⤵
PID:1672

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
93⤵
PID:756

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
93⤵
PID:1556

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
94⤵
PID:268

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
94⤵
PID:516

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
95⤵
PID:2028

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
95⤵
PID:1104

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
96⤵
PID:1728

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
96⤵
PID:1564

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
97⤵
PID:1648

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
97⤵
PID:684

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
98⤵
PID:1904

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
98⤵
PID:1200

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
99⤵
PID:1092

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
99⤵
PID:1868

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
100⤵
PID:1960

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
100⤵
PID:1740

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
101⤵
PID:2000

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
101⤵
PID:1980

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
102⤵
PID:1836

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
102⤵
PID:1848

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
103⤵
PID:1984

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
103⤵
PID:1864

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
104⤵
PID:1540

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
104⤵
PID:1764

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
105⤵
PID:1856

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
105⤵
PID:1788

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
106⤵
PID:1620

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
106⤵
PID:1808

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
107⤵
PID:1872

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
107⤵
PID:1612

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
108⤵
PID:1772

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
108⤵
PID:1776

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
109⤵
PID:1608

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
109⤵
PID:1376

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
110⤵
PID:1640

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
110⤵
PID:1616

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
111⤵
PID:800

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
111⤵
PID:1748

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
112⤵
PID:1544

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
112⤵
PID:328

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
113⤵
PID:344

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
113⤵
PID:1724

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
114⤵
PID:1692

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
114⤵
PID:1688

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
115⤵
PID:1088

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
115⤵
PID:796

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
116⤵
PID:1760

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
116⤵
PID:1668

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
117⤵
PID:1096

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
117⤵
PID:340

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
118⤵
PID:1480

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
118⤵
PID:1816

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
119⤵
PID:272

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
119⤵
PID:1300

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
120⤵
PID:1380

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
120⤵
PID:436

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
121⤵
PID:2012

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
121⤵
PID:844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
122⤵
PID:1860

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
122⤵
PID:536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
123⤵
PID:1328

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
123⤵
PID:1992

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
124⤵
PID:1536

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
124⤵
PID:1996

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
125⤵
PID:1204

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
125⤵
PID:1812

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
126⤵
PID:316

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
126⤵
PID:1844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
127⤵
PID:1964

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
127⤵
PID:1876

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
128⤵
PID:1804

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
128⤵
PID:1448

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
129⤵
PID:1768

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
129⤵
PID:1832

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
130⤵
PID:1792

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
130⤵
PID:1944

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
131⤵
PID:1592

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
131⤵
PID:1684

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
132⤵
PID:1780

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
132⤵
PID:1636

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
133⤵
PID:1840

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
133⤵
PID:1600

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
134⤵
PID:1652

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
134⤵
PID:1596

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
135⤵
PID:1644

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
135⤵
PID:1800

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
136⤵
PID:920

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
136⤵
PID:644

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
137⤵
PID:1552

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
137⤵
PID:1784

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
138⤵
PID:1796

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
138⤵
PID:332

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
139⤵
PID:432

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
139⤵
PID:884

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
140⤵
PID:1080

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
140⤵
PID:1672

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
141⤵
PID:756

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
141⤵
PID:1556

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
142⤵
PID:268

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
142⤵
PID:516

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
143⤵
PID:2028

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
143⤵
PID:1104

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
144⤵
PID:1728

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
144⤵
PID:1564

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
145⤵
PID:1648

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
145⤵
PID:684

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
146⤵
PID:1904

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
146⤵
PID:1200

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
147⤵
PID:1092

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
147⤵
PID:1868

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
148⤵
PID:1960

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
148⤵
PID:1740

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
149⤵
PID:2000

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
149⤵
PID:1980

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
150⤵
PID:1836

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
150⤵
PID:1848

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
151⤵
PID:1984

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
151⤵
PID:1864

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
152⤵
PID:1540

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
152⤵
PID:1764

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
153⤵
PID:1856

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
153⤵
PID:1788

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
154⤵
PID:1620

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
154⤵
PID:1808

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
155⤵
PID:1872

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
155⤵
PID:1612

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
156⤵
PID:1772

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
156⤵
PID:1776

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
157⤵
PID:1608

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
157⤵
PID:1376

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
158⤵
PID:1640

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
158⤵
PID:1616

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
159⤵
PID:800

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
159⤵
PID:1748

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
160⤵
PID:1544

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
160⤵
PID:328

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
161⤵
PID:344

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
161⤵
PID:1724

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
162⤵
PID:1692

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
162⤵
PID:1688

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
163⤵
PID:1088

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
163⤵
PID:796

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
164⤵
PID:1760

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
164⤵
PID:1668

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
165⤵
PID:1096

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
165⤵
PID:340

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
166⤵
PID:1480

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
166⤵
PID:1816

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
167⤵
PID:272

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
167⤵
PID:1300

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
168⤵
PID:1380

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
168⤵
PID:436

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
169⤵
PID:2012

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
169⤵
PID:844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
170⤵
PID:1860

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
170⤵
PID:536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
171⤵
PID:1328

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
171⤵
PID:1992

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
172⤵
PID:1536

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
172⤵
PID:1996

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
173⤵
PID:1204

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
173⤵
PID:1812

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
174⤵
PID:316

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
174⤵
PID:1844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
175⤵
PID:1964

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
175⤵
PID:1876

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
176⤵
PID:1804

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
176⤵
PID:1448

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
177⤵
PID:1768

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
177⤵
PID:1832

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
178⤵
PID:1792

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
178⤵
PID:1944

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
179⤵
PID:1592

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
179⤵
PID:1684

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
180⤵
PID:1780

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
180⤵
PID:1636

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
181⤵
PID:1840

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
181⤵
PID:1600

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
182⤵
PID:1652

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
182⤵
PID:1596

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
183⤵
PID:1644

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
183⤵
PID:1800

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
184⤵
PID:920

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
184⤵
PID:644

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
185⤵
PID:1552

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
185⤵
PID:1784

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
186⤵
PID:1796

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
186⤵
PID:332

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
187⤵
PID:432

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
187⤵
PID:884

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
188⤵
PID:1080

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
188⤵
PID:1672

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
189⤵
PID:756

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
189⤵
PID:1556

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
190⤵
PID:268

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
190⤵
PID:516

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
191⤵
PID:2028

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
191⤵
PID:1104

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
192⤵
PID:1728

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
192⤵
PID:1564

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
193⤵
PID:1648

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
193⤵
PID:684

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
194⤵
PID:1904

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
194⤵
PID:1200

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
195⤵
PID:1092

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
195⤵
PID:1868

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
196⤵
PID:1960

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
196⤵
PID:1740

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
197⤵
PID:2000

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
197⤵
PID:1980

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
198⤵
PID:1836

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
198⤵
PID:1848

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
199⤵
PID:1984

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
199⤵
PID:1864

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
200⤵
PID:1540

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
200⤵
PID:1764

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
201⤵
PID:1856

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
201⤵
PID:1788

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
202⤵
PID:1620

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
202⤵
PID:1808

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
203⤵
PID:1872

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
203⤵
PID:1612

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
204⤵
PID:1772

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
204⤵
PID:1776

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
205⤵
PID:1608

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
205⤵
PID:1376

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
206⤵
PID:1640

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
206⤵
PID:1616

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
207⤵
PID:800

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
207⤵
PID:1748

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
208⤵
PID:1544

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
208⤵
PID:328

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
209⤵
PID:344

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
209⤵
PID:1724

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
210⤵
PID:1692

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
210⤵
PID:1688

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
211⤵
PID:1088

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
211⤵
PID:796

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
212⤵
PID:1760

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
212⤵
PID:1668

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
213⤵
PID:1096

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
213⤵
PID:340

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
214⤵
PID:1480

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
214⤵
PID:1816

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
215⤵
PID:272

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
215⤵
PID:1300

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
216⤵
PID:1380

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
216⤵
PID:436

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
217⤵
PID:2012

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
217⤵
PID:844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
218⤵
PID:1860

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
218⤵
PID:536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
219⤵
PID:1328

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
219⤵
PID:1992

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
220⤵
PID:1536

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
220⤵
PID:1996

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
221⤵
PID:1204

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
221⤵
PID:1812

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
222⤵
PID:316

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
222⤵
PID:1844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
223⤵
PID:1964

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
223⤵
PID:1876

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
224⤵
PID:1804

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
224⤵
PID:1448

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
225⤵
PID:1768

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
225⤵
PID:1832

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
226⤵
PID:1792

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
226⤵
PID:1944

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
227⤵
PID:1592

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
227⤵
PID:1684

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
228⤵
PID:1780

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
228⤵
PID:1636

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
229⤵
PID:1840

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
229⤵
PID:1600

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
230⤵
PID:1652

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
230⤵
PID:1596

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
231⤵
PID:1644

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
231⤵
PID:1800

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
232⤵
PID:920

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
232⤵
PID:644

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
233⤵
PID:1552

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
233⤵
PID:1784

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
234⤵
PID:1796

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
234⤵
PID:332

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
235⤵
PID:432

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
235⤵
PID:884

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
236⤵
PID:1080

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
236⤵
PID:1672

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
237⤵
PID:756

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
237⤵
PID:1556

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
238⤵
PID:272

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
238⤵
PID:1816

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
239⤵
PID:1380

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
239⤵
PID:1300

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
240⤵
PID:2012

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
240⤵
PID:436

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
241⤵
PID:1860

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
241⤵
PID:844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
242⤵
PID:1328

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
242⤵
PID:536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
243⤵
PID:1536

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
243⤵
PID:1992

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
244⤵
PID:1204

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
244⤵
PID:1996

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
245⤵
PID:316

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
245⤵
PID:1812

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
246⤵
PID:1964

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
246⤵
PID:1844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
247⤵
PID:1804

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
247⤵
PID:1876

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
248⤵
PID:1768

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
248⤵
PID:1448

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
249⤵
PID:1792

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
249⤵
PID:1832

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
250⤵
PID:1592

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
250⤵
PID:1944

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
251⤵
PID:1780

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
251⤵
PID:1684

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
252⤵
PID:1840

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
252⤵
PID:1636

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
253⤵
PID:1652

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
253⤵
PID:1600

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
254⤵
PID:1644

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
254⤵
PID:1596

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
255⤵
PID:920

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
255⤵
PID:1800

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
256⤵
PID:1552

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
256⤵
PID:644

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
257⤵
PID:1796

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
257⤵
PID:1784

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
258⤵
PID:432

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
258⤵
PID:332

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
259⤵
PID:1080

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
259⤵
PID:884

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
260⤵
PID:756

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
260⤵
PID:1672

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
261⤵
PID:272

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
261⤵
PID:1556

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
262⤵
PID:1380

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
262⤵
PID:1816

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
263⤵
PID:2012

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
263⤵
PID:1300

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
264⤵
PID:1860

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
264⤵
PID:436

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
265⤵
PID:1328

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
265⤵
PID:844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
266⤵
PID:1536

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
266⤵
PID:536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
267⤵
PID:1204

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
267⤵
PID:1992

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
268⤵
PID:316

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
268⤵
PID:1996

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
269⤵
PID:1964

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
269⤵
PID:1812

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
270⤵
PID:1804

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
270⤵
PID:1844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
271⤵
PID:1768

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
271⤵
PID:1876

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
272⤵
PID:1792

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
272⤵
PID:1448

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
273⤵
PID:1592

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
273⤵
PID:1832

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
274⤵
PID:1780

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
274⤵
PID:1944

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
275⤵
PID:1840

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
275⤵
PID:1684

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
276⤵
PID:1652

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
276⤵
PID:1636

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
277⤵
PID:1644

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
277⤵
PID:1600

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
278⤵
PID:920

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
278⤵
PID:1596

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
279⤵
PID:1552

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
279⤵
PID:1800

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
280⤵
PID:1796

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
280⤵
PID:644

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
281⤵
PID:432

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
281⤵
PID:1784

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
282⤵
PID:1080

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
282⤵
PID:332

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
283⤵
PID:756

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
283⤵
PID:884

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
284⤵
PID:272

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
284⤵
PID:1672

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
285⤵
PID:1380

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
285⤵
PID:1556

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
286⤵
PID:2012

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
286⤵
PID:1816

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
287⤵
PID:1860

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
287⤵
PID:1300

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
288⤵
PID:1328

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
288⤵
PID:436

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
289⤵
PID:1536

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
289⤵
PID:844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
290⤵
PID:1204

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
290⤵
PID:536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
291⤵
PID:316

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
291⤵
PID:1992

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
292⤵
PID:1964

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
292⤵
PID:1996

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
293⤵
PID:1804

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
293⤵
PID:1812

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
294⤵
PID:1768

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
294⤵
PID:1844

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
295⤵
PID:1792

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
295⤵
PID:1876

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
296⤵
PID:1592

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
296⤵
PID:1448

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
297⤵
PID:1780

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
297⤵
PID:1832

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
298⤵
PID:1840

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
298⤵
PID:1944

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
299⤵
PID:1652

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
299⤵
PID:1684

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
300⤵
PID:1644

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
300⤵
PID:1636

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
301⤵
PID:920

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
301⤵
PID:1600

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
302⤵
PID:1552

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
302⤵
PID:1596

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
303⤵
PID:1796

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
303⤵
PID:1692

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
304⤵
PID:1688

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
304⤵
PID:1088

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
305⤵
PID:796

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
305⤵
PID:852

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
306⤵
PID:1760

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
306⤵
PID:1668

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
307⤵
PID:1096

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
307⤵
PID:2028

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
308⤵
PID:1324

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
308⤵
PID:884

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
309⤵
PID:1492

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
309⤵
PID:1380

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
310⤵
PID:1672

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
310⤵
PID:2012

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
311⤵
PID:1556

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
311⤵
PID:1860

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
312⤵
PID:1816

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
312⤵
PID:1328

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
313⤵
PID:1300

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
313⤵
PID:1536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
314⤵
PID:436

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
314⤵
PID:1204

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
315⤵
PID:844

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
315⤵
PID:316

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
316⤵
PID:536

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
316⤵
PID:1964

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
317⤵
PID:1992

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
317⤵
PID:1804

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
318⤵
PID:1996

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
318⤵
PID:1768

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
319⤵
PID:1812

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
319⤵
PID:1792

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
320⤵
PID:1844

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
320⤵
PID:1592

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
321⤵
PID:1876

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
321⤵
PID:1780

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
322⤵
PID:1448

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
322⤵
PID:1840

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
323⤵
PID:1832

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
323⤵
PID:1652

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
324⤵
PID:1944

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
324⤵
PID:552

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
325⤵
PID:1644

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
325⤵
PID:1684

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
326⤵
PID:920

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
326⤵
PID:1636

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
327⤵
PID:1552

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
327⤵
PID:1600

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
328⤵
PID:1796

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
328⤵
PID:1596

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
329⤵
PID:1688

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
329⤵
PID:1692

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
330⤵
PID:796

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
330⤵
PID:1088

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
331⤵
PID:1760

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
331⤵
PID:852

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
332⤵
PID:1096

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
332⤵
PID:1668

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
333⤵
PID:1324

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
333⤵
PID:2028

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
334⤵
PID:1492

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
334⤵
PID:884

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
335⤵
PID:1672

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
335⤵
PID:1380

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
336⤵
PID:1556

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
336⤵
PID:2012

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
337⤵
PID:1816

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
337⤵
PID:1860

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
338⤵
PID:1300

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
338⤵
PID:1328

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
339⤵
PID:436

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
339⤵
PID:1536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
340⤵
PID:844

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
340⤵
PID:1204

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
341⤵
PID:536

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
341⤵
PID:316

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
342⤵
PID:1992

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
342⤵
PID:1964

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
343⤵
PID:1996

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
343⤵
PID:1804

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
344⤵
PID:1812

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
344⤵
PID:1768

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
345⤵
PID:1844

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
345⤵
PID:1792

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
346⤵
PID:1876

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
346⤵
PID:1592

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
347⤵
PID:1448

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
347⤵
PID:1780

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
348⤵
PID:1832

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
348⤵
PID:1840

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
349⤵
PID:1944

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
349⤵
PID:1652

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
350⤵
PID:1644

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
350⤵
PID:552

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
351⤵
PID:920

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
351⤵
PID:1684

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
352⤵
PID:1552

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
352⤵
PID:1636

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
353⤵
PID:1796

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
353⤵
PID:1600

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
354⤵
PID:1688

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
354⤵
PID:1596

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
355⤵
PID:796

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
355⤵
PID:1692

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
356⤵
PID:1760

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
356⤵
PID:1088

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
357⤵
PID:1096

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
357⤵
PID:852

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
358⤵
PID:1324

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
358⤵
PID:1668

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
359⤵
PID:1492

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
359⤵
PID:2028

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
360⤵
PID:1672

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
360⤵
PID:884

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
361⤵
PID:1556

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
361⤵
PID:1380

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
362⤵
PID:1816

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
362⤵
PID:2012

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
363⤵
PID:1300

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
363⤵
PID:1860

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
364⤵
PID:436

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
364⤵
PID:1328

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
365⤵
PID:844

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
365⤵
PID:1536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
366⤵
PID:536

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
366⤵
PID:1204

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
367⤵
PID:1992

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
367⤵
PID:316

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
368⤵
PID:1996

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
368⤵
PID:1964

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
369⤵
PID:1812

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
369⤵
PID:1804

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
370⤵
PID:1844

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
370⤵
PID:1768

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
371⤵
PID:1772

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
371⤵
PID:1612

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
372⤵
PID:1608

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
372⤵
PID:1776

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
373⤵
PID:1640

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
373⤵
PID:1376

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
374⤵
PID:1012

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
374⤵
PID:800

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
375⤵
PID:1616

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
375⤵
PID:1544

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
376⤵
PID:1748

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
376⤵
PID:344

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
377⤵
PID:328

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
377⤵
PID:1472

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
378⤵
PID:1724

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
378⤵
PID:432

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
379⤵
PID:1800

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
379⤵
PID:1080

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
380⤵
PID:644

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
380⤵
PID:1784

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
381⤵
PID:1260

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
381⤵
PID:332

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
382⤵
PID:756

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
382⤵
PID:1480

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
383⤵
PID:272

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
383⤵
PID:1728

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
384⤵
PID:952

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
384⤵
PID:1648

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
385⤵
PID:1104

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
385⤵
PID:1904

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
386⤵
PID:1564

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
386⤵
PID:1092

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
387⤵
PID:684

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
387⤵
PID:1960

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
388⤵
PID:1200

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
388⤵
PID:2000

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
389⤵
PID:1868

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
389⤵
PID:1836

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
390⤵
PID:1740

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
390⤵
PID:1984

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
391⤵
PID:1980

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
391⤵
PID:1540

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
392⤵
PID:1848

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
392⤵
PID:1856

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
393⤵
PID:1864

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
393⤵
PID:1620

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
394⤵
PID:1764

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
394⤵
PID:1872

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
395⤵
PID:1788

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
395⤵
PID:1792

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
396⤵
PID:1808

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
396⤵
PID:1592

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
397⤵
PID:1448

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
397⤵
PID:1780

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
398⤵
PID:1832

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
398⤵
PID:1840

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
399⤵
PID:1944

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
399⤵
PID:1652

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
400⤵
PID:1644

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
400⤵
PID:552

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
401⤵
PID:920

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
401⤵
PID:1684

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
402⤵
PID:1552

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
402⤵
PID:1636

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
403⤵
PID:1796

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
403⤵
PID:1600

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
404⤵
PID:1688

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
404⤵
PID:1596

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
405⤵
PID:796

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
405⤵
PID:1692

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
406⤵
PID:1760

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
406⤵
PID:1088

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
407⤵
PID:1096

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
407⤵
PID:852

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
408⤵
PID:1324

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
408⤵
PID:1668

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
409⤵
PID:1492

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
409⤵
PID:2028

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
410⤵
PID:1672

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
410⤵
PID:884

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
411⤵
PID:1556

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
411⤵
PID:1380

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
412⤵
PID:1816

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
412⤵
PID:2012

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
413⤵
PID:1300

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
413⤵
PID:1860

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
414⤵
PID:436

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
414⤵
PID:1328

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
415⤵
PID:844

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
415⤵
PID:1536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
416⤵
PID:536

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
416⤵
PID:1204

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
417⤵
PID:1992

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
417⤵
PID:316

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
418⤵
PID:1996

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
418⤵
PID:1964

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
419⤵
PID:1812

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
419⤵
PID:1804

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
420⤵
PID:1844

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
420⤵
PID:1768

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
421⤵
PID:1772

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
421⤵
PID:1612

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
422⤵
PID:1608

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
422⤵
PID:1776

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
423⤵
PID:1640

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
423⤵
PID:1376

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
424⤵
PID:1012

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
424⤵
PID:800

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
425⤵
PID:1616

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
425⤵
PID:1544

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
426⤵
PID:1748

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
426⤵
PID:344

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
427⤵
PID:328

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
427⤵
PID:1472

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
428⤵
PID:1724

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
428⤵
PID:432

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
429⤵
PID:1800

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
429⤵
PID:1080

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
430⤵
PID:644

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
430⤵
PID:1784

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
431⤵
PID:1260

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
431⤵
PID:332

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
432⤵
PID:756

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
432⤵
PID:1480

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
433⤵
PID:272

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
433⤵
PID:1728

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
434⤵
PID:952

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
434⤵
PID:1648

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
435⤵
PID:1104

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
435⤵
PID:1904

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
436⤵
PID:1564

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
436⤵
PID:1092

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
437⤵
PID:684

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
437⤵
PID:1960

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
438⤵
PID:1200

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
438⤵
PID:2000

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
439⤵
PID:1868

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
439⤵
PID:1836

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
440⤵
PID:1740

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
440⤵
PID:1984

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
441⤵
PID:1980

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
441⤵
PID:1540

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
442⤵
PID:1848

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
442⤵
PID:1856

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
443⤵
PID:1864

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
443⤵
PID:1620

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
444⤵
PID:1764

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
444⤵
PID:1872

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
445⤵
PID:1788

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
445⤵
PID:1792

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
446⤵
PID:1808

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
446⤵
PID:1592

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
447⤵
PID:1448

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
447⤵
PID:1780

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
448⤵
PID:1832

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
448⤵
PID:1840

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
449⤵
PID:1944

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
449⤵
PID:1652

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
450⤵
PID:1644

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
450⤵
PID:552

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
451⤵
PID:920

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
451⤵
PID:1684

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
452⤵
PID:1552

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
452⤵
PID:1636

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
453⤵
PID:1796

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
453⤵
PID:1600

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
454⤵
PID:1688

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
454⤵
PID:1596

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
455⤵
PID:796

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
455⤵
PID:1692

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
456⤵
PID:1760

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
456⤵
PID:1088

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
457⤵
PID:1096

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
457⤵
PID:852

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
458⤵
PID:1324

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
458⤵
PID:1668

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
459⤵
PID:1492

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
459⤵
PID:2028

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
460⤵
PID:1672

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
460⤵
PID:884

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
461⤵
PID:1556

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
461⤵
PID:1380

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
462⤵
PID:1816

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
462⤵
PID:2012

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
463⤵
PID:1300

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
463⤵
PID:1860

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
464⤵
PID:436

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
464⤵
PID:1328

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
465⤵
PID:844

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
465⤵
PID:1536

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
466⤵
PID:536

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
466⤵
PID:1204

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
467⤵
PID:1992

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
467⤵
PID:316

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
468⤵
PID:1996

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
468⤵
PID:1964

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
469⤵
PID:1812

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
469⤵
PID:1804

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
470⤵
PID:1844

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
470⤵
PID:1768

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
471⤵
PID:1772

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
471⤵
PID:1612

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
472⤵
PID:1608

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
472⤵
PID:1776

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
473⤵
PID:1640

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
473⤵
PID:1376

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
474⤵
PID:1012

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
474⤵
PID:800

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
475⤵
PID:1616

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
475⤵
PID:1544

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
476⤵
PID:1748

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
476⤵
PID:344

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
477⤵
PID:328

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
477⤵
PID:1472

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
478⤵
PID:1724

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
478⤵
PID:432

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
479⤵
PID:1800

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
479⤵
PID:1080

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
480⤵
PID:644

C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
480⤵
PID:1784

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
481⤵
PID:1260

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
27⤵
PID:1648

C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
"C:\Users\Admin\AppData\Local\Temp\259828bb5f45d915f7b9b28867e46724.exe"
1⤵
PID:920

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1

T1053

Persistence

Scheduled Task

1

T1053

Privilege Escalation

Scheduled Task

1

T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\64a93f59b5894fd5b0d60f9f52db3822.xml
MD5
a035055e1c80bc652520df45650c690f

SHA1
37b8364ad46e17199eb5a7ee89bb506bba384adb

SHA256
2b9948d34674d0fc0f9cb290da8298441b56205f6e341e3cfa1954df42c2b655

SHA512
678279d1bfc8a71c27a5a2c3afa5fd266882a62610863a3e4ebc2489f17827ed4c680c89e6b8b52621320500294d2df9888259ccdc5d38def43e739c1f325fc1

Download Submit
memory/268-57-0x0000000000000000-mapping.dmp

Download
memory/268-37-0x0000000000000000-mapping.dmp

Download
memory/272-20-0x0000000000000000-mapping.dmp

Download
memory/316-63-0x0000000000000000-mapping.dmp

Download
memory/436-38-0x0000000000000000-mapping.dmp

Download
memory/436-58-0x0000000000000000-mapping.dmp

Download
memory/536-61-0x0000000000000000-mapping.dmp

Download
memory/684-40-0x0000000000000000-mapping.dmp

Download
memory/796-54-0x0000000000000000-mapping.dmp

Download
memory/844-39-0x0000000000000000-mapping.dmp

Download
memory/884-55-0x0000000000000000-mapping.dmp

Download
memory/884-35-0x0000000000000000-mapping.dmp

Download
memory/1092-41-0x0000000000000000-mapping.dmp

Download
memory/1096-36-0x0000000000000000-mapping.dmp

Download
memory/1096-56-0x0000000000000000-mapping.dmp

Download
memory/1244-5-0x0000000000000000-mapping.dmp

Download
memory/1328-23-0x0000000000000000-mapping.dmp

Download
memory/1448-46-0x0000000000000000-mapping.dmp

Download
memory/1448-2-0x0000000000000000-mapping.dmp

Download
memory/1448-26-0x0000000000000000-mapping.dmp

Download
memory/1480-18-0x0000000000000000-mapping.dmp

Download
memory/1540-45-0x0000000000000000-mapping.dmp

Download
memory/1540-25-0x0000000000000000-mapping.dmp

Download
memory/1544-52-0x0000000000000000-mapping.dmp

Download
memory/1552-33-0x0000000000000000-mapping.dmp

Download
memory/1552-53-0x0000000000000000-mapping.dmp

Download
memory/1564-59-0x0000000000000000-mapping.dmp

Download
memory/1596-51-0x0000000000000000-mapping.dmp

Download
memory/1596-31-0x0000000000000000-mapping.dmp

Download
memory/1608-10-0x0000000000000000-mapping.dmp

Download
memory/1616-50-0x0000000000000000-mapping.dmp

Download
memory/1616-30-0x0000000000000000-mapping.dmp

Download
memory/1640-32-0x0000000000000000-mapping.dmp

Download
memory/1644-12-0x0000000000000000-mapping.dmp

Download
memory/1648-22-0x0000000000000000-mapping.dmp

Download
memory/1652-11-0x0000000000000000-mapping.dmp

Download
memory/1668-16-0x0000000000000000-mapping.dmp

Download
memory/1672-17-0x0000000000000000-mapping.dmp

Download
memory/1688-15-0x0000000000000000-mapping.dmp

Download
memory/1708-19-0x0000000000000000-mapping.dmp

Download
memory/1724-34-0x0000000000000000-mapping.dmp

Download
memory/1728-21-0x0000000000000000-mapping.dmp

Download
memory/1740-62-0x0000000000000000-mapping.dmp

Download
memory/1780-49-0x0000000000000000-mapping.dmp

Download
memory/1780-29-0x0000000000000000-mapping.dmp

Download
memory/1784-14-0x0000000000000000-mapping.dmp

Download
memory/1788-7-0x0000000000000000-mapping.dmp

Download
memory/1788-66-0x0000000000000000-mapping.dmp

Download
memory/1796-13-0x0000000000000000-mapping.dmp

Download
memory/1808-8-0x0000000000000000-mapping.dmp

Download
memory/1832-47-0x0000000000000000-mapping.dmp

Download
memory/1832-27-0x0000000000000000-mapping.dmp

Download
memory/1860-60-0x0000000000000000-mapping.dmp

Download
memory/1872-28-0x0000000000000000-mapping.dmp

Download
memory/1872-48-0x0000000000000000-mapping.dmp

Download
memory/1876-6-0x0000000000000000-mapping.dmp

Download
memory/1876-65-0x0000000000000000-mapping.dmp

Download
memory/1944-9-0x0000000000000000-mapping.dmp

Download
memory/1964-24-0x0000000000000000-mapping.dmp

Download
memory/1964-44-0x0000000000000000-mapping.dmp

Download
memory/1980-43-0x0000000000000000-mapping.dmp

Download
memory/1984-64-0x0000000000000000-mapping.dmp

Download
memory/1992-42-0x0000000000000000-mapping.dmp

Download
memory/2000-3-0x0000000000000000-mapping.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v6

Replay Monitor

Loading Replay Monitor...

Downloads