webmonitor | cd7038d9c290ad8fcb241c29c5b065503f20fcb8b7d2a6358bee1293dcdb985f

Analysis

max time kernel
210s
max time network
212s
platform
windows10_x64
resource
win10-en-20210920
submitted
01-11-2021 12:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

NetLimiter.v4.1.12.exe
Size

4.8MB
MD5

eb0fb019c0626149b93cdc23435c48db
SHA1

e384eadb10e73b01dfef362eeed4f35a7dc0e8de
SHA256

cf456e778483f20af00ed1db5332d5bb7bb4f330ecb1b30cca20101c565c3a16
SHA512

252210421d2788778a09f4492dd37780f5f94dabeb5fd1d064a9336031217c99a397c9ac26a7a8aeb2de135e5f0f8b53c144197d0144e0b4145355ccb2945881

Score

10^/10

webmonitor backdoor infostealer rat upx

Malware Config

Signatures

RevcodeRat, WebMonitorRat
WebMonitor is a remote access tool that you can use from any browser access to control, and monitor your phones, or PCs.
backdoor rat infostealer webmonitor

WebMonitor Payload 1 IoCs

resource	yara_rule
behavioral1/memory/4416-502-0x00000000005F5A70-mapping.dmp	family_webmonitor

Downloads MZ/PE file

Executes dropped EXE 17 IoCs

pid	Process
588	dx.exe
1124	dx.exe
3724	dx.exe
1536	dx.exe
1428	dx.exe
2584	dx.exe
436	dx.exe
2292	dx.exe
1768	dx.exe
2948	dx.exe
3188	dx.exe
3200	dx.exe
2360	dx.exe
3324	dx.exe
3416	dx.exe
3916	dx.exe
796	dx.exe

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/4416-525-0x0000000000400000-0x00000000005F7000-memory.dmp	upx

Drops startup file 2 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\dx.exe	NetLimiter.v4.1.12.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\dx.exe	NetLimiter.v4.1.12.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1148 wrote to memory of 588	1148	NetLimiter.v4.1.12.exe	70
PID 1148 wrote to memory of 588	1148	NetLimiter.v4.1.12.exe	70
PID 1148 wrote to memory of 588	1148	NetLimiter.v4.1.12.exe	70
PID 1148 wrote to memory of 908	1148	NetLimiter.v4.1.12.exe	71
PID 1148 wrote to memory of 908	1148	NetLimiter.v4.1.12.exe	71
PID 908 wrote to memory of 1124	908	NetLimiter.v4.1.12.exe	72
PID 908 wrote to memory of 1124	908	NetLimiter.v4.1.12.exe	72
PID 908 wrote to memory of 1124	908	NetLimiter.v4.1.12.exe	72
PID 908 wrote to memory of 960	908	NetLimiter.v4.1.12.exe	73
PID 908 wrote to memory of 960	908	NetLimiter.v4.1.12.exe	73
PID 960 wrote to memory of 3724	960	NetLimiter.v4.1.12.exe	74
PID 960 wrote to memory of 3724	960	NetLimiter.v4.1.12.exe	74
PID 960 wrote to memory of 3724	960	NetLimiter.v4.1.12.exe	74
PID 960 wrote to memory of 2224	960	NetLimiter.v4.1.12.exe	75
PID 960 wrote to memory of 2224	960	NetLimiter.v4.1.12.exe	75
PID 2224 wrote to memory of 1536	2224	NetLimiter.v4.1.12.exe	76
PID 2224 wrote to memory of 1536	2224	NetLimiter.v4.1.12.exe	76
PID 2224 wrote to memory of 1536	2224	NetLimiter.v4.1.12.exe	76
PID 2224 wrote to memory of 3416	2224	NetLimiter.v4.1.12.exe	77
PID 2224 wrote to memory of 3416	2224	NetLimiter.v4.1.12.exe	77
PID 3416 wrote to memory of 1428	3416	NetLimiter.v4.1.12.exe	78
PID 3416 wrote to memory of 1428	3416	NetLimiter.v4.1.12.exe	78
PID 3416 wrote to memory of 1428	3416	NetLimiter.v4.1.12.exe	78
PID 3416 wrote to memory of 2616	3416	NetLimiter.v4.1.12.exe	79
PID 3416 wrote to memory of 2616	3416	NetLimiter.v4.1.12.exe	79
PID 2616 wrote to memory of 2584	2616	NetLimiter.v4.1.12.exe	80
PID 2616 wrote to memory of 2584	2616	NetLimiter.v4.1.12.exe	80
PID 2616 wrote to memory of 2584	2616	NetLimiter.v4.1.12.exe	80
PID 2616 wrote to memory of 1396	2616	NetLimiter.v4.1.12.exe	81
PID 2616 wrote to memory of 1396	2616	NetLimiter.v4.1.12.exe	81
PID 1396 wrote to memory of 436	1396	NetLimiter.v4.1.12.exe	82
PID 1396 wrote to memory of 436	1396	NetLimiter.v4.1.12.exe	82
PID 1396 wrote to memory of 436	1396	NetLimiter.v4.1.12.exe	82
PID 1396 wrote to memory of 668	1396	NetLimiter.v4.1.12.exe	83
PID 1396 wrote to memory of 668	1396	NetLimiter.v4.1.12.exe	83
PID 668 wrote to memory of 2292	668	NetLimiter.v4.1.12.exe	84
PID 668 wrote to memory of 2292	668	NetLimiter.v4.1.12.exe	84
PID 668 wrote to memory of 2292	668	NetLimiter.v4.1.12.exe	84
PID 668 wrote to memory of 916	668	NetLimiter.v4.1.12.exe	87
PID 668 wrote to memory of 916	668	NetLimiter.v4.1.12.exe	87
PID 916 wrote to memory of 1768	916	NetLimiter.v4.1.12.exe	85
PID 916 wrote to memory of 1768	916	NetLimiter.v4.1.12.exe	85
PID 916 wrote to memory of 1768	916	NetLimiter.v4.1.12.exe	85
PID 916 wrote to memory of 1780	916	NetLimiter.v4.1.12.exe	86
PID 916 wrote to memory of 1780	916	NetLimiter.v4.1.12.exe	86
PID 1780 wrote to memory of 2948	1780	NetLimiter.v4.1.12.exe	88
PID 1780 wrote to memory of 2948	1780	NetLimiter.v4.1.12.exe	88
PID 1780 wrote to memory of 2948	1780	NetLimiter.v4.1.12.exe	88
PID 1780 wrote to memory of 3508	1780	NetLimiter.v4.1.12.exe	89
PID 1780 wrote to memory of 3508	1780	NetLimiter.v4.1.12.exe	89
PID 3508 wrote to memory of 3188	3508	NetLimiter.v4.1.12.exe	90
PID 3508 wrote to memory of 3188	3508	NetLimiter.v4.1.12.exe	90
PID 3508 wrote to memory of 3188	3508	NetLimiter.v4.1.12.exe	90
PID 3508 wrote to memory of 1812	3508	NetLimiter.v4.1.12.exe	91
PID 3508 wrote to memory of 1812	3508	NetLimiter.v4.1.12.exe	91
PID 1812 wrote to memory of 3200	1812	NetLimiter.v4.1.12.exe	92
PID 1812 wrote to memory of 3200	1812	NetLimiter.v4.1.12.exe	92
PID 1812 wrote to memory of 3200	1812	NetLimiter.v4.1.12.exe	92
PID 1812 wrote to memory of 3640	1812	NetLimiter.v4.1.12.exe	155
PID 1812 wrote to memory of 3640	1812	NetLimiter.v4.1.12.exe	155
PID 3640 wrote to memory of 2360	3640	dx.exe	94
PID 3640 wrote to memory of 2360	3640	dx.exe	94
PID 3640 wrote to memory of 2360	3640	dx.exe	94
PID 3640 wrote to memory of 3824	3640	dx.exe	206

C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
"C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe"
1⤵
- Drops startup file
- Suspicious use of WriteProcessMemory
PID:1148
- C:\Users\Admin\AppData\Local\Temp\dx.exe
  C:\Users\Admin\AppData\Local\Temp/dx.exe
  2⤵
  - Executes dropped EXE
  PID:588
- - C:\Users\Admin\AppData\Local\Temp\dx.exe
    "C:\Users\Admin\AppData\Local\Temp\dx.exe"
    3⤵
    PID:2368
- C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
  C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:908
- - C:\Users\Admin\AppData\Local\Temp\dx.exe
    C:\Users\Admin\AppData\Local\Temp/dx.exe
    3⤵
    - Executes dropped EXE
    PID:1124
  - - C:\Users\Admin\AppData\Local\Temp\dx.exe
      "C:\Users\Admin\AppData\Local\Temp\dx.exe"
      4⤵
      PID:7140
  - - C:\Users\Admin\AppData\Local\Temp\dx.exe
      "C:\Users\Admin\AppData\Local\Temp\dx.exe"
      4⤵
      PID:1300
- - C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
    C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:960
  - - C:\Users\Admin\AppData\Local\Temp\dx.exe
      C:\Users\Admin\AppData\Local\Temp/dx.exe
      4⤵
      Executes dropped EXE
      PID:3724
    - - C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        "C:\Users\Admin\AppData\Local\Temp\dx.exe"
        5⤵
        
        PID:4416
  - - C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
      C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
      4⤵
      Suspicious use of WriteProcessMemory
      PID:2224
    - - C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        5⤵
        Executes dropped EXE
        
        PID:1536
      - C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        "C:\Users\Admin\AppData\Local\Temp\dx.exe"
        6⤵
        
        PID:7600
    - - C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:3416
      - C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        6⤵
        Executes dropped EXE
        
        PID:1428
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        "C:\Users\Admin\AppData\Local\Temp\dx.exe"
        7⤵
        
        PID:5012
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        "C:\Users\Admin\AppData\Local\Temp\dx.exe"
        7⤵
        
        PID:4980
      - C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:2616
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        7⤵
        Executes dropped EXE
        
        PID:2584
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        "C:\Users\Admin\AppData\Local\Temp\dx.exe"
        8⤵
        
        PID:5892
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:1396
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        8⤵
        Executes dropped EXE
        
        PID:436
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        "C:\Users\Admin\AppData\Local\Temp\dx.exe"
        9⤵
        
        PID:6116
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:668
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        9⤵
        Executes dropped EXE
        
        PID:2292
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        "C:\Users\Admin\AppData\Local\Temp\dx.exe"
        10⤵
        
        PID:7224
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        "C:\Users\Admin\AppData\Local\Temp\dx.exe"
        10⤵
        
        PID:7228
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        "C:\Users\Admin\AppData\Local\Temp\dx.exe"
        10⤵
        
        PID:7420
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        "C:\Users\Admin\AppData\Local\Temp\dx.exe"
        10⤵
        
        PID:4552
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:916

C:\Users\Admin\AppData\Local\Temp\dx.exe
C:\Users\Admin\AppData\Local\Temp/dx.exe
1⤵
- Executes dropped EXE
PID:1768
- C:\Users\Admin\AppData\Local\Temp\dx.exe
  "C:\Users\Admin\AppData\Local\Temp\dx.exe"
  2⤵
  PID:6336

C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
1⤵
- Suspicious use of WriteProcessMemory
PID:1780
- C:\Users\Admin\AppData\Local\Temp\dx.exe
  C:\Users\Admin\AppData\Local\Temp/dx.exe
  2⤵
  - Executes dropped EXE
  PID:2948
- - C:\Users\Admin\AppData\Local\Temp\dx.exe
    "C:\Users\Admin\AppData\Local\Temp\dx.exe"
    3⤵
    PID:8856
- - C:\Users\Admin\AppData\Local\Temp\dx.exe
    "C:\Users\Admin\AppData\Local\Temp\dx.exe"
    3⤵
    PID:8916
- - C:\Users\Admin\AppData\Local\Temp\dx.exe
    "C:\Users\Admin\AppData\Local\Temp\dx.exe"
    3⤵
    PID:8892
- C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
  C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3508
- - C:\Users\Admin\AppData\Local\Temp\dx.exe
    C:\Users\Admin\AppData\Local\Temp/dx.exe
    3⤵
    - Executes dropped EXE
    PID:3188
- - C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
    C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:1812
  - - C:\Users\Admin\AppData\Local\Temp\dx.exe
      C:\Users\Admin\AppData\Local\Temp/dx.exe
      4⤵
      Executes dropped EXE
      PID:3200
  - - C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
      C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
      4⤵
      PID:3640
    - - C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        5⤵
        Executes dropped EXE
        
        PID:2360
    - - C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        5⤵
        
        PID:3824
      - C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        6⤵
        
        PID:3324
      - C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        6⤵
        
        PID:960
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        7⤵
        
        PID:3416
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        7⤵
        
        PID:1316
    - - C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        5⤵
        
        PID:4164
    - - C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        5⤵
        
        PID:4192
      - C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        6⤵
        
        PID:4284
      - C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        6⤵
        
        PID:4308
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        7⤵
        
        PID:4448
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        8⤵
        
        PID:4604
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        8⤵
        
        PID:4628
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        9⤵
        
        PID:4768
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        10⤵
        
        PID:4868
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        10⤵
        
        PID:4892
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        11⤵
        
        PID:5064
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        12⤵
        
        PID:1752
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        13⤵
        
        PID:388
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        13⤵
        
        PID:4248
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        12⤵
        
        PID:1760
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        11⤵
        
        PID:5028
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        9⤵
        
        PID:4732
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        7⤵
        
        PID:4424

C:\Users\Admin\AppData\Local\Temp\dx.exe
C:\Users\Admin\AppData\Local\Temp/dx.exe
1⤵
- Executes dropped EXE
PID:3916

C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
1⤵
PID:3952
- C:\Users\Admin\AppData\Local\Temp\dx.exe
  C:\Users\Admin\AppData\Local\Temp/dx.exe
  2⤵
  - Executes dropped EXE
  PID:796
- C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
  C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
  2⤵
  PID:3004
- - C:\Users\Admin\AppData\Local\Temp\dx.exe
    C:\Users\Admin\AppData\Local\Temp/dx.exe
    3⤵
    PID:1908
- - C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
    C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
    3⤵
    PID:1004
  - - C:\Users\Admin\AppData\Local\Temp\dx.exe
      C:\Users\Admin\AppData\Local\Temp/dx.exe
      4⤵
      PID:1560
  - - C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
      C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
      4⤵
      PID:3432
    - - C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        5⤵
        
        PID:2672
    - - C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        5⤵
        
        PID:1044
      - C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        6⤵
        
        PID:2844
      - C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        6⤵
        
        PID:1760

C:\Users\Admin\AppData\Local\Temp\dx.exe
C:\Users\Admin\AppData\Local\Temp/dx.exe
1⤵
PID:3068

C:\Users\Admin\AppData\Local\Temp\dx.exe
C:\Users\Admin\AppData\Local\Temp/dx.exe
1⤵
PID:3712

C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
1⤵
PID:1760
- C:\Users\Admin\AppData\Local\Temp\dx.exe
  C:\Users\Admin\AppData\Local\Temp/dx.exe
  2⤵
  PID:2472
- C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
  C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
  2⤵
  PID:3640
- C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
  C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
  2⤵
  PID:3656
- C:\Users\Admin\AppData\Local\Temp\dx.exe
  C:\Users\Admin\AppData\Local\Temp/dx.exe
  2⤵
  PID:68

C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
1⤵
PID:3996

C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
1⤵
PID:4312
- C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
  C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
  2⤵
  PID:4212
- - C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
    C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
    3⤵
    PID:4728
  - - C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
      C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
      4⤵
      PID:1228
    - - C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        5⤵
        
        PID:4140
      - C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        6⤵
        
        PID:4184
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        7⤵
        
        PID:4472
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        8⤵
        
        PID:4676
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        9⤵
        
        PID:5064
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        10⤵
        
        PID:3292
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        11⤵
        
        PID:4492
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        12⤵
        
        PID:2720
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        13⤵
        
        PID:4636
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        14⤵
        
        PID:4436
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        15⤵
        
        PID:1120
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        16⤵
        
        PID:5220
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        17⤵
        
        PID:5336
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        18⤵
        
        PID:5480
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        19⤵
        
        PID:5604
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        20⤵
        
        PID:5700
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        21⤵
        
        PID:5816
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        22⤵
        
        PID:5948
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        23⤵
        
        PID:6104
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        24⤵
        
        PID:5228
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        25⤵
        
        PID:5412
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        26⤵
        
        PID:5688
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        27⤵
        
        PID:5936
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        28⤵
        
        PID:2172
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        29⤵
        
        PID:2236
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        30⤵
        
        PID:5652
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        31⤵
        
        PID:5972
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        32⤵
        
        PID:3824
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        33⤵
        
        PID:5580
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        34⤵
        
        PID:5860
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        35⤵
        
        PID:5204
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        36⤵
        
        PID:3128
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        37⤵
        
        PID:6208
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        38⤵
        
        PID:6300
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        39⤵
        
        PID:6396
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        40⤵
        
        PID:6532
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        41⤵
        
        PID:6660
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        42⤵
        
        PID:6756
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        43⤵
        
        PID:6864
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        44⤵
        
        PID:6972
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        45⤵
        
        PID:7100
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        46⤵
        
        PID:5884
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        47⤵
        
        PID:6300
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        48⤵
        
        PID:6640
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        49⤵
        
        PID:6828
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        50⤵
        
        PID:6976
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        51⤵
        
        PID:2144
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        52⤵
        
        PID:6500
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        53⤵
        
        PID:2644
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        54⤵
        
        PID:7056
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        55⤵
        
        PID:3400
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        56⤵
        
        PID:6916
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        57⤵
        
        PID:4120
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        58⤵
        
        PID:2016
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        59⤵
        
        PID:7220
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        60⤵
        
        PID:7332
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        61⤵
        
        PID:7464
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        62⤵
        
        PID:7540
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        63⤵
        
        PID:7688
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        64⤵
        
        PID:7784
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        65⤵
        
        PID:7924
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        66⤵
        
        PID:8004
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        67⤵
        
        PID:8096
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        68⤵
        
        PID:6664
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        69⤵
        
        PID:7192
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        70⤵
        
        PID:4800
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        71⤵
        
        PID:7540
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        72⤵
        
        PID:7392
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        73⤵
        
        PID:7924
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        74⤵
        
        PID:8100
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        75⤵
        
        PID:3016
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        76⤵
        
        PID:2680
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        77⤵
        
        PID:7636
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        78⤵
        
        PID:5036
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        79⤵
        
        PID:8184
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        80⤵
        
        PID:1860
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        81⤵
        
        PID:1984
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        82⤵
        
        PID:4528
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        83⤵
        
        PID:5416
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        84⤵
        
        PID:7380
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        85⤵
        
        PID:2292
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        86⤵
        
        PID:8100
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        87⤵
        
        PID:5240
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        88⤵
        
        PID:7492
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        89⤵
        
        PID:8208
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        90⤵
        
        PID:8296
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        91⤵
        
        PID:8392
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        92⤵
        
        PID:8512
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        93⤵
        
        PID:8572
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        94⤵
        
        PID:8684
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        95⤵
        
        PID:8844
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        96⤵
        
        PID:8972
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        97⤵
        
        PID:9084
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        98⤵
        
        PID:9208
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        99⤵
        
        PID:8368
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        100⤵
        
        PID:8524
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        101⤵
        
        PID:5572
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        102⤵
        
        PID:8952
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        103⤵
        
        PID:9096
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        104⤵
        
        PID:8272
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        105⤵
        
        PID:6460
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        106⤵
        
        PID:8732
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        107⤵
        
        PID:6912
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        108⤵
        
        PID:8360
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        109⤵
        
        PID:8468
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        110⤵
        
        PID:6696
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        111⤵
        
        PID:6912
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        112⤵
        
        PID:6812
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        113⤵
        
        PID:4300
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        114⤵
        
        PID:2824
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        114⤵
        
        PID:8540
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        115⤵
        
        PID:9244
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        116⤵
        
        PID:9348
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        117⤵
        
        PID:9468
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        118⤵
        
        PID:9568
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        119⤵
        
        PID:9696
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        120⤵
        
        PID:9864
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        121⤵
        
        PID:9996
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        122⤵
        
        PID:10124
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        123⤵
        
        PID:10224
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        124⤵
        
        PID:9312
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        125⤵
        
        PID:9524
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        126⤵
        
        PID:7500
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        127⤵
        
        PID:7716
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        128⤵
        
        PID:10180
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        129⤵
        
        PID:6812
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        130⤵
        
        PID:9488
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        130⤵
        
        PID:9632
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        131⤵
        
        PID:10092
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        131⤵
        
        PID:10108
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        132⤵
        
        PID:8324
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        133⤵
        
        PID:4748
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        134⤵
        
        PID:2224
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        135⤵
        
        PID:10012
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        136⤵
        
        PID:10296
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        137⤵
        
        PID:10412
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        138⤵
        
        PID:10532
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        139⤵
        
        PID:10656
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        140⤵
        
        PID:10768
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        141⤵
        
        PID:10908
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        142⤵
        
        PID:11004
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        143⤵
        
        PID:11140
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        144⤵
        
        PID:3724
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        145⤵
        
        PID:10508
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        146⤵
        
        PID:8980
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        147⤵
        
        PID:4888
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        148⤵
        
        PID:10936
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        149⤵
        
        PID:11032
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        150⤵
        
        PID:616
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        151⤵
        
        PID:10416
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        152⤵
        
        PID:10720
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        153⤵
        
        PID:10880
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        154⤵
        
        PID:10936
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        155⤵
        
        PID:3060
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        156⤵
        
        PID:2680
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        157⤵
        
        PID:9900
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        158⤵
        
        PID:8600
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        159⤵
        
        PID:8212
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        160⤵
        
        PID:10876
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        160⤵
        
        PID:9108
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        161⤵
        
        PID:10416
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        162⤵
        
        PID:9160
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        163⤵
        
        PID:11364
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        164⤵
        
        PID:11476
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        165⤵
        
        PID:11560
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        166⤵
        
        PID:11668
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        166⤵
        
        PID:11700
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        167⤵
        
        PID:11852
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        168⤵
        
        PID:11936
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        169⤵
        
        PID:12040
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        170⤵
        
        PID:12152
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        171⤵
        
        PID:12260
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        172⤵
        
        PID:11344
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        173⤵
        
        PID:11684
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        174⤵
        
        PID:11872
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        175⤵
        
        PID:11956
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        176⤵
        
        PID:12228
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        177⤵
        
        PID:8992
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        178⤵
        
        PID:10980
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        179⤵
        
        PID:7160
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        180⤵
        
        PID:11728
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        181⤵
        
        PID:9296
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        182⤵
        
        PID:11708
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        183⤵
        
        PID:1460
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        184⤵
        
        PID:11684
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        185⤵
        
        PID:4820
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        186⤵
        
        PID:5352
        
        C:\Users\Admin\AppData\Local\Temp\NetLimiter.v4.1.12.exe
        
        C:\Users\Admin\AppData\Local\Temp/NetLimiter.v4.1.12.exe
        187⤵
        
        PID:1688
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        186⤵
        
        PID:12092
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        185⤵
        
        PID:1568
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        184⤵
        
        PID:12012
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        183⤵
        
        PID:8992
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        182⤵
        
        PID:6208
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        181⤵
        
        PID:9796
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        180⤵
        
        PID:1780
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        179⤵
        
        PID:5468
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        178⤵
        
        PID:8732
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        177⤵
        
        PID:11280
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        176⤵
        
        PID:12204
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        175⤵
        
        PID:9968
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        174⤵
        
        PID:11860
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        173⤵
        
        PID:11656
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        172⤵
        
        PID:11328
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        171⤵
        
        PID:12252
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        170⤵
        
        PID:12144
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        169⤵
        
        PID:12032
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        168⤵
        
        PID:11928
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        167⤵
        
        PID:11844
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        165⤵
        
        PID:11552
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        164⤵
        
        PID:11468
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        163⤵
        
        PID:11356
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        162⤵
        
        PID:8212
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        161⤵
        
        PID:10736
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        159⤵
        
        PID:10548
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        158⤵
        Executes dropped EXE
        
        PID:3416
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        157⤵
        
        PID:8236
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        156⤵
        
        PID:2896
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        155⤵
        
        PID:3200
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        154⤵
        
        PID:3316
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        153⤵
        
        PID:10884
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        152⤵
        
        PID:10660
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        151⤵
        
        PID:4748
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        150⤵
        
        PID:4268
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        149⤵
        
        PID:11120
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        148⤵
        
        PID:10728
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        147⤵
        
        PID:10516
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        146⤵
        
        PID:4256
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        145⤵
        
        PID:10520
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        144⤵
        Executes dropped EXE
        
        PID:3324
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        143⤵
        
        PID:11132
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        142⤵
        
        PID:10996
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        141⤵
        
        PID:10900
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        140⤵
        
        PID:10760
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        139⤵
        
        PID:10648
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        138⤵
        
        PID:10524
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        137⤵
        
        PID:10404
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        136⤵
        
        PID:10288
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        135⤵
        
        PID:9632
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        134⤵
        
        PID:10060
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        133⤵
        
        PID:9904
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        132⤵
        
        PID:3996
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        129⤵
        
        PID:156
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        128⤵
        
        PID:10136
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        127⤵
        
        PID:7736
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        126⤵
        
        PID:9512
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        125⤵
        
        PID:9604
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        124⤵
        
        PID:9292
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        123⤵
        
        PID:10216
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        122⤵
        
        PID:10116
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        121⤵
        
        PID:9988
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        120⤵
        
        PID:9856
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        119⤵
        
        PID:9688
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        118⤵
        
        PID:9560
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        117⤵
        
        PID:9460
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        116⤵
        
        PID:9340
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        115⤵
        
        PID:9236
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        113⤵
        
        PID:7948
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        112⤵
        
        PID:8828
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        111⤵
        
        PID:2008
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        110⤵
        
        PID:8956
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        109⤵
        
        PID:8472
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        108⤵
        
        PID:4108
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        107⤵
        
        PID:4764
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        106⤵
        
        PID:8444
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        105⤵
        
        PID:3464
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        104⤵
        
        PID:1212
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        103⤵
        
        PID:9092
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        102⤵
        
        PID:6136
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        101⤵
        
        PID:8700
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        100⤵
        
        PID:5196
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        99⤵
        
        PID:8304
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        98⤵
        
        PID:9200
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        97⤵
        
        PID:9076
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        96⤵
        
        PID:8964
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        95⤵
        
        PID:8836
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        94⤵
        
        PID:8676
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        93⤵
        
        PID:8564
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        92⤵
        
        PID:8504
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        91⤵
        
        PID:8384
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        90⤵
        
        PID:8288
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        89⤵
        
        PID:8200
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        88⤵
        
        PID:4396
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        87⤵
        
        PID:3564
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        86⤵
        
        PID:5988
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        85⤵
        
        PID:4312
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        84⤵
        
        PID:8172
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        83⤵
        
        PID:7924
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        82⤵
        
        PID:5156
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        81⤵
        
        PID:4184
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        80⤵
        
        PID:1368
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        79⤵
        
        PID:8084
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        78⤵
        
        PID:7816
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        77⤵
        
        PID:4624
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        76⤵
        
        PID:1188
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        75⤵
        
        PID:7272
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        74⤵
        
        PID:8064
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        73⤵
        
        PID:7984
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        72⤵
        
        PID:5084
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        71⤵
        
        PID:7640
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        70⤵
        
        PID:7452
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        69⤵
        
        PID:7204
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        68⤵
        
        PID:7128
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        67⤵
        
        PID:8088
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        66⤵
        
        PID:7996
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        65⤵
        
        PID:7916
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        64⤵
        
        PID:7776
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        63⤵
        
        PID:7680
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        62⤵
        
        PID:7532
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        61⤵
        
        PID:7456
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        60⤵
        
        PID:7324
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        59⤵
        
        PID:7212
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        58⤵
        
        PID:5884
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        57⤵
        
        PID:7056
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        56⤵
        
        PID:6500
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        55⤵
        
        PID:6316
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        54⤵
        
        PID:3844
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        53⤵
        
        PID:6868
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        52⤵
        
        PID:6372
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        51⤵
        
        PID:7100
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        50⤵
        
        PID:6996
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        49⤵
        
        PID:6772
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        48⤵
        
        PID:6580
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        47⤵
        
        PID:6352
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        46⤵
        
        PID:5864
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        45⤵
        
        PID:7092
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        44⤵
        
        PID:6964
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        43⤵
        
        PID:6856
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        42⤵
        
        PID:6748
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        41⤵
        
        PID:6652
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        40⤵
        
        PID:6524
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        39⤵
        
        PID:6388
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        38⤵
        
        PID:6292
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        37⤵
        
        PID:6200
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        36⤵
        
        PID:5800
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        35⤵
        
        PID:5604
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        34⤵
        
        PID:4516
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        33⤵
        
        PID:2236
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        32⤵
        
        PID:1940
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        31⤵
        
        PID:6016
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        30⤵
        
        PID:5544
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        29⤵
        
        PID:4548
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        28⤵
        
        PID:6088
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        27⤵
        
        PID:5896
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        26⤵
        
        PID:5676
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        25⤵
        
        PID:5432
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        24⤵
        
        PID:748
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        23⤵
        
        PID:6096
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        22⤵
        
        PID:5940
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        21⤵
        
        PID:5808
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        20⤵
        
        PID:5692
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        19⤵
        
        PID:5596
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        18⤵
        
        PID:5472
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        17⤵
        
        PID:5328
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        16⤵
        
        PID:5212
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        15⤵
        
        PID:4928
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        14⤵
        
        PID:2480
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        13⤵
        
        PID:4792
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        12⤵
        
        PID:4260
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        11⤵
        
        PID:4804
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        10⤵
        
        PID:1252
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        9⤵
        
        PID:3144
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        8⤵
        
        PID:4880
        
        C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        7⤵
        
        PID:4912
      - C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:3640
    - - C:\Users\Admin\AppData\Local\Temp\dx.exe
        
        C:\Users\Admin\AppData\Local\Temp/dx.exe
        5⤵
        
        PID:5072
  - - C:\Users\Admin\AppData\Local\Temp\dx.exe
      C:\Users\Admin\AppData\Local\Temp/dx.exe
      4⤵
      PID:4956
- - C:\Users\Admin\AppData\Local\Temp\dx.exe
    C:\Users\Admin\AppData\Local\Temp/dx.exe
    3⤵
    PID:4740
- C:\Users\Admin\AppData\Local\Temp\dx.exe
  C:\Users\Admin\AppData\Local\Temp/dx.exe
  2⤵
  PID:4452

C:\Users\Admin\AppData\Local\Temp\dx.exe
C:\Users\Admin\AppData\Local\Temp/dx.exe
1⤵
PID:2500

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -s W32Time
1⤵
PID:9428

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -s W32Time
1⤵
PID:11916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/68-450-0x0000000004B00000-0x0000000004B9C000-memory.dmp

Filesize
624KB

Download
memory/68-518-0x0000000004B00000-0x0000000004B9C000-memory.dmp

Filesize
624KB

Download
memory/436-303-0x0000000004DB3000-0x0000000004DB5000-memory.dmp

Filesize
8KB

Download
memory/436-217-0x0000000004DB0000-0x0000000004DB1000-memory.dmp

Filesize
4KB

Download
memory/588-176-0x0000000005280000-0x000000000577E000-memory.dmp

Filesize
5.0MB

Download
memory/588-209-0x0000000007120000-0x0000000007121000-memory.dmp

Filesize
4KB

Download
memory/588-294-0x0000000005280000-0x000000000577E000-memory.dmp

Filesize
5.0MB

Download
memory/796-421-0x00000000052D0000-0x000000000536C000-memory.dmp

Filesize
624KB

Download
memory/796-377-0x00000000052D0000-0x000000000536C000-memory.dmp

Filesize
624KB

Download
memory/1124-307-0x0000000005240000-0x000000000573E000-memory.dmp

Filesize
5.0MB

Download
memory/1124-180-0x0000000005240000-0x000000000573E000-memory.dmp

Filesize
5.0MB

Download
memory/1124-128-0x0000000000890000-0x0000000000891000-memory.dmp

Filesize
4KB

Download
memory/1124-136-0x00000000051A0000-0x00000000051A1000-memory.dmp

Filesize
4KB

Download
memory/1124-147-0x0000000005740000-0x0000000005741000-memory.dmp

Filesize
4KB

Download
memory/1124-154-0x0000000005240000-0x0000000005241000-memory.dmp

Filesize
4KB

Download
memory/1428-162-0x0000000004F10000-0x0000000004F11000-memory.dmp

Filesize
4KB

Download
memory/1428-166-0x0000000005080000-0x0000000005081000-memory.dmp

Filesize
4KB

Download
memory/1428-189-0x0000000005B70000-0x0000000005B71000-memory.dmp

Filesize
4KB

Download
memory/1428-290-0x0000000004F13000-0x0000000004F15000-memory.dmp

Filesize
8KB

Download
memory/1428-173-0x0000000005330000-0x0000000005331000-memory.dmp

Filesize
4KB

Download
memory/1536-165-0x00000000051A0000-0x000000000569E000-memory.dmp

Filesize
5.0MB

Download
memory/1536-327-0x00000000051A0000-0x000000000569E000-memory.dmp

Filesize
5.0MB

Download
memory/1560-411-0x0000000004AC0000-0x0000000004FBE000-memory.dmp

Filesize
5.0MB

Download
memory/1560-460-0x0000000004AC0000-0x0000000004FBE000-memory.dmp

Filesize
5.0MB

Download
memory/1760-618-0x0000000005210000-0x000000000570E000-memory.dmp

Filesize
5.0MB

Download
memory/1768-310-0x00000000049B0000-0x0000000004EAE000-memory.dmp

Filesize
5.0MB

Download
memory/1768-247-0x00000000049B0000-0x0000000004EAE000-memory.dmp

Filesize
5.0MB

Download
memory/1908-399-0x0000000005250000-0x00000000052EC000-memory.dmp

Filesize
624KB

Download
memory/1908-454-0x0000000005250000-0x00000000052EC000-memory.dmp

Filesize
624KB

Download
memory/2292-223-0x0000000004E10000-0x000000000530E000-memory.dmp

Filesize
5.0MB

Download
memory/2292-329-0x0000000004E10000-0x000000000530E000-memory.dmp

Filesize
5.0MB

Download
memory/2360-372-0x0000000004950000-0x0000000004E4E000-memory.dmp

Filesize
5.0MB

Download
memory/2360-299-0x0000000004950000-0x0000000004E4E000-memory.dmp

Filesize
5.0MB

Download
memory/2472-566-0x0000000005020000-0x000000000551E000-memory.dmp

Filesize
5.0MB

Download
memory/2472-491-0x0000000005020000-0x000000000551E000-memory.dmp

Filesize
5.0MB

Download
memory/2584-318-0x0000000004B10000-0x000000000500E000-memory.dmp

Filesize
5.0MB

Download
memory/2584-185-0x0000000004B10000-0x000000000500E000-memory.dmp

Filesize
5.0MB

Download
memory/2672-484-0x0000000004CD0000-0x00000000051CE000-memory.dmp

Filesize
5.0MB

Download
memory/2672-414-0x0000000004CD0000-0x00000000051CE000-memory.dmp

Filesize
5.0MB

Download
memory/2844-487-0x0000000004F30000-0x000000000542E000-memory.dmp

Filesize
5.0MB

Download
memory/2844-425-0x0000000004F30000-0x000000000542E000-memory.dmp

Filesize
5.0MB

Download
memory/2948-261-0x0000000004880000-0x000000000491C000-memory.dmp

Filesize
624KB

Download
memory/2948-322-0x0000000004880000-0x000000000491C000-memory.dmp

Filesize
624KB

Download
memory/3068-533-0x0000000005690000-0x0000000005B8E000-memory.dmp

Filesize
5.0MB

Download
memory/3068-457-0x0000000005690000-0x0000000005B8E000-memory.dmp

Filesize
5.0MB

Download
memory/3188-286-0x0000000004950000-0x0000000004E4E000-memory.dmp

Filesize
5.0MB

Download
memory/3188-339-0x0000000004950000-0x0000000004E4E000-memory.dmp

Filesize
5.0MB

Download
memory/3200-335-0x00000000047C0000-0x000000000485C000-memory.dmp

Filesize
624KB

Download
memory/3200-362-0x00000000047C0000-0x000000000485C000-memory.dmp

Filesize
624KB

Download
memory/3324-312-0x0000000004F40000-0x000000000543E000-memory.dmp

Filesize
5.0MB

Download
memory/3324-402-0x0000000004F40000-0x000000000543E000-memory.dmp

Filesize
5.0MB

Download
memory/3416-406-0x0000000004E30000-0x000000000532E000-memory.dmp

Filesize
5.0MB

Download
memory/3416-331-0x0000000004E30000-0x000000000532E000-memory.dmp

Filesize
5.0MB

Download
memory/3712-481-0x0000000004F90000-0x000000000548E000-memory.dmp

Filesize
5.0MB

Download
memory/3712-537-0x0000000004F90000-0x000000000548E000-memory.dmp

Filesize
5.0MB

Download
memory/3724-182-0x00000000057C0000-0x0000000005CBE000-memory.dmp

Filesize
5.0MB

Download
memory/3724-267-0x00000000057C0000-0x0000000005CBE000-memory.dmp

Filesize
5.0MB

Download
memory/3916-368-0x0000000005910000-0x0000000005E0E000-memory.dmp

Filesize
5.0MB

Download
memory/3916-417-0x0000000005910000-0x0000000005E0E000-memory.dmp

Filesize
5.0MB

Download
memory/4164-561-0x0000000005570000-0x0000000005A6E000-memory.dmp

Filesize
5.0MB

Download
memory/4164-522-0x0000000005570000-0x0000000005A6E000-memory.dmp

Filesize
5.0MB

Download
memory/4284-527-0x00000000053A0000-0x0000000005432000-memory.dmp

Filesize
584KB

Download
memory/4416-525-0x0000000000400000-0x00000000005F7000-memory.dmp

Filesize
2.0MB

Download
memory/4416-571-0x0000000002FD0000-0x0000000003FD0000-memory.dmp

Filesize
16.0MB

Download
memory/4424-530-0x0000000005770000-0x0000000005C6E000-memory.dmp

Filesize
5.0MB

Download
memory/4424-593-0x0000000005770000-0x0000000005C6E000-memory.dmp

Filesize
5.0MB

Download
memory/4604-614-0x00000000057B0000-0x0000000005CAE000-memory.dmp

Filesize
5.0MB

Download
memory/4604-557-0x00000000057B0000-0x0000000005CAE000-memory.dmp

Filesize
5.0MB

Download
memory/4732-558-0x0000000002BD0000-0x0000000002BD1000-memory.dmp

Filesize
4KB

Download
memory/4732-621-0x0000000002BD3000-0x0000000002BD5000-memory.dmp

Filesize
8KB

Download
memory/4868-589-0x0000000005670000-0x0000000005B6E000-memory.dmp

Filesize
5.0MB

Download
memory/5028-596-0x0000000005410000-0x00000000054AC000-memory.dmp

Filesize
624KB

Download