Analysis

  • max time kernel
    143s
  • max time network
    90s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    28-11-2022 17:48

General

  • Target

    60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2.exe

  • Size

    1.0MB

  • MD5

    dc03fdb0261a5e747cd3a83153be2df6

  • SHA1

    d27ce5f7f2947e7f914153d572025c6ab75792f3

  • SHA256

    60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

  • SHA512

    83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

  • SSDEEP

    24576:ySkWMx78Vs5UisGWbNNu6HyVm5L5vCa3cgCObJjRMH:ySix78Vs+fvNJyyqa

Malware Config

Signatures

  • HawkEye

    HawkEye is a malware kit that has seen continuous development since at least 2013.

  • NirSoft MailPassView 17 IoCs

    Password recovery tool for various email clients

  • NirSoft WebBrowserPassView 59 IoCs

    Password recovery tool for various web browsers

  • Nirsoft 59 IoCs
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Uses the VBS compiler for execution 1 TTPs
  • Accesses Microsoft Outlook accounts 1 TTPs 1 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2.exe
    "C:\Users\Admin\AppData\Local\Temp\60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetThreadContext
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1104
    • C:\Users\Admin\AppData\Local\Temp\60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2.exe
      "C:\Users\Admin\AppData\Local\Temp\60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2.exe"
      2⤵
      • Adds Run key to start application
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of SetWindowsHookEx
      PID:1176
      • C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
        C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe /stext "C:\Users\Admin\AppData\Local\Temp\holdermail.txt"
        3⤵
        • Accesses Microsoft Outlook accounts
        PID:2944
      • C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
        C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe /stext "C:\Users\Admin\AppData\Local\Temp\holderwb.txt"
        3⤵
          PID:2612
        • C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
          C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe /stext "C:\Users\Admin\AppData\Local\Temp\holderprodkey.txt"
          3⤵
            PID:1452
          • C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
            C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe /stext "C:\Users\Admin\AppData\Local\Temp\holderskypeview.txt"
            3⤵
              PID:3656
          • C:\Users\Admin\AppData\Roaming\Microsoft\BrokerInfrastructure.exe
            "C:\Users\Admin\AppData\Roaming\Microsoft\BrokerInfrastructure.exe"
            2⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of WriteProcessMemory
            PID:1448
            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
              "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
              3⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Suspicious use of SetThreadContext
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:652
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1676
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1256
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1420
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1000
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1888
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:604
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:676
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1488
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1732
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1760
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1864
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1240
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1528
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1960
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:268
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1896
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:716
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1924
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:816
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1180
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:552
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1448
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1984
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1352
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1264
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:612
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1048
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:584
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1160
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1552
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1648
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2008
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1036
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1604
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1612
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:556
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1096
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:1584
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2064
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2268
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2400
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2508
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2604
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2696
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2808
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2904
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:3024
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2080
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2224
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2408
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2536
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2644
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2752
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2872
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2992
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2036
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2284
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2428
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2548
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2676
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                • Executes dropped EXE
                PID:2796
              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                4⤵
                  PID:2912
                • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                  "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                  4⤵
                    PID:3032
                  • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                    "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                    4⤵
                      PID:2116
                    • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                      "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                      4⤵
                        PID:2324
                      • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                        "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                        4⤵
                          PID:2452
                        • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                          "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                          4⤵
                            PID:2632
                          • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                            "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                            4⤵
                              PID:2748
                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                              "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                              4⤵
                                PID:1912
                              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                4⤵
                                  PID:1684
                                • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                  "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                  4⤵
                                    PID:1148
                                  • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                    "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                    4⤵
                                      PID:2292
                                    • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                      "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                      4⤵
                                        PID:3056
                                      • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                        "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                        4⤵
                                          PID:1440
                                        • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                          "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                          4⤵
                                            PID:2928
                                          • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                            "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                            4⤵
                                              PID:2828
                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                              "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                              4⤵
                                                PID:2956
                                              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                4⤵
                                                  PID:2728
                                                • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                  "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                  4⤵
                                                    PID:2228
                                                  • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                    "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                    4⤵
                                                      PID:2476
                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                      "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                      4⤵
                                                        PID:2520
                                                      • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                        "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                        4⤵
                                                          PID:2656
                                                        • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                          "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                          4⤵
                                                            PID:2784
                                                          • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                            "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                            4⤵
                                                              PID:2884
                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                              "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                              4⤵
                                                                PID:2164
                                                              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                4⤵
                                                                  PID:3068
                                                                • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                  "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                  4⤵
                                                                    PID:2144
                                                                  • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                    "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                    4⤵
                                                                      PID:2364
                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                      "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                      4⤵
                                                                        PID:2464
                                                                      • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                        "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                        4⤵
                                                                          PID:2712
                                                                        • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                          "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                          4⤵
                                                                            PID:592
                                                                          • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                            "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                            4⤵
                                                                              PID:2148
                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                              "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                              4⤵
                                                                                PID:2988
                                                                              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                4⤵
                                                                                  PID:2320
                                                                                • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                  "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                  4⤵
                                                                                    PID:2472
                                                                                  • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                    "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                    4⤵
                                                                                      PID:2568
                                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                      "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                      4⤵
                                                                                        PID:2848
                                                                                      • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                        "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                        4⤵
                                                                                          PID:1900
                                                                                        • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                          "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                          4⤵
                                                                                            PID:2168
                                                                                          • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                            "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                            4⤵
                                                                                              PID:2344
                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                              "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                              4⤵
                                                                                                PID:856
                                                                                              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                4⤵
                                                                                                  PID:2708
                                                                                                • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                  "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                  4⤵
                                                                                                    PID:2852
                                                                                                  • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                    "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                    4⤵
                                                                                                      PID:1568
                                                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                      "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                      4⤵
                                                                                                        PID:2368
                                                                                                      • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                        "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                        4⤵
                                                                                                          PID:2588
                                                                                                        • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                          "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                          4⤵
                                                                                                            PID:2308
                                                                                                          • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                            "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                            4⤵
                                                                                                              PID:2160
                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                              "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                              4⤵
                                                                                                                PID:3044
                                                                                                              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                4⤵
                                                                                                                  PID:2340
                                                                                                                • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                  "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                  4⤵
                                                                                                                    PID:1068
                                                                                                                  • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                    "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                    4⤵
                                                                                                                      PID:2740
                                                                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                      "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                      4⤵
                                                                                                                        PID:2156
                                                                                                                      • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                        "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                        4⤵
                                                                                                                          PID:2208
                                                                                                                        • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                          "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                          4⤵
                                                                                                                            PID:2392
                                                                                                                          • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                            "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                            4⤵
                                                                                                                              PID:2220
                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                              "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                              4⤵
                                                                                                                                PID:784
                                                                                                                              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                4⤵
                                                                                                                                  PID:996
                                                                                                                                • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                  "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                  4⤵
                                                                                                                                    PID:2384
                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                    "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                    4⤵
                                                                                                                                      PID:2680
                                                                                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                      "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                      4⤵
                                                                                                                                        PID:2952
                                                                                                                                      • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                        "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                        4⤵
                                                                                                                                          PID:2100
                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                          "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                          4⤵
                                                                                                                                            PID:2132
                                                                                                                                          • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                            "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                            4⤵
                                                                                                                                              PID:2560
                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                              "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                              4⤵
                                                                                                                                                PID:2788
                                                                                                                                              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                4⤵
                                                                                                                                                  PID:2060
                                                                                                                                                • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                  "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                  4⤵
                                                                                                                                                    PID:2456
                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                    4⤵
                                                                                                                                                      PID:2936
                                                                                                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                      "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                      4⤵
                                                                                                                                                        PID:1052
                                                                                                                                                      • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                        4⤵
                                                                                                                                                          PID:2376
                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                          "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                          4⤵
                                                                                                                                                            PID:2780
                                                                                                                                                          • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                            "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                            4⤵
                                                                                                                                                              PID:2940
                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                              "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                              4⤵
                                                                                                                                                                PID:2192
                                                                                                                                                              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                4⤵
                                                                                                                                                                  PID:2652
                                                                                                                                                                • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                  "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                  4⤵
                                                                                                                                                                    PID:3040
                                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                    4⤵
                                                                                                                                                                      PID:2012
                                                                                                                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                      "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                      4⤵
                                                                                                                                                                        PID:2660
                                                                                                                                                                      • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                        "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                        4⤵
                                                                                                                                                                          PID:1564
                                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                          "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                          4⤵
                                                                                                                                                                            PID:280
                                                                                                                                                                          • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                            "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                            4⤵
                                                                                                                                                                              PID:2432
                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                              "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                              4⤵
                                                                                                                                                                                PID:964
                                                                                                                                                                              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                4⤵
                                                                                                                                                                                  PID:1280
                                                                                                                                                                                • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                  "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                  4⤵
                                                                                                                                                                                    PID:2836
                                                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                    "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                    4⤵
                                                                                                                                                                                      PID:2300
                                                                                                                                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                      "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                      4⤵
                                                                                                                                                                                        PID:2108
                                                                                                                                                                                      • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                        "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                        4⤵
                                                                                                                                                                                          PID:2388
                                                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                          "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                          4⤵
                                                                                                                                                                                            PID:2720
                                                                                                                                                                                          • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                            "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                            4⤵
                                                                                                                                                                                              PID:2072
                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                              "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                              4⤵
                                                                                                                                                                                                PID:2552
                                                                                                                                                                                              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                4⤵
                                                                                                                                                                                                  PID:2380
                                                                                                                                                                                                • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                  "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                    PID:2620
                                                                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                    "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                      PID:1580
                                                                                                                                                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                      "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                        PID:2820
                                                                                                                                                                                                      • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                        "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                          PID:2864
                                                                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                          "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                            PID:2088
                                                                                                                                                                                                          • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                            "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                              PID:2840
                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                              "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                PID:2256
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                  PID:2856
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                    PID:2436
                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                      PID:1496
                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                        PID:2120
                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                          PID:3092
                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                            PID:3184
                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                              PID:3276
                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                PID:3368
                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                  PID:3468
                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                    PID:3560
                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                      PID:3680
                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                        PID:3780
                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                          PID:3872
                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                            PID:3960
                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                              PID:4056
                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                PID:3116
                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                  PID:3256
                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                    PID:3360
                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                      PID:3416
                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                        PID:3544
                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                          PID:3672
                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                            PID:3732
                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                              PID:3868
                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                PID:3980
                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                  PID:4076
                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                    PID:3144
                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                      PID:3244
                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                        PID:3356
                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                          PID:3484
                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                            PID:3588
                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                              PID:1948
                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                PID:3832
                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                  PID:3968
                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                    PID:4072
                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                      PID:3100
                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                        PID:3212
                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                          PID:3308
                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                            PID:3492
                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                              PID:3628
                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                PID:3736
                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                  PID:3860
                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe"
                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                    PID:3984
                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Roaming\Microsoft\BrokerInfrastructure.exe
                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Roaming\Microsoft\BrokerInfrastructure.exe"
                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                • Executes dropped EXE
                                                                                                                                                                                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                                                                                                PID:2020

                                                                                                                                                                                                                                                                                            Network

                                                                                                                                                                                                                                                                                            MITRE ATT&CK Matrix ATT&CK v6

                                                                                                                                                                                                                                                                                            Execution

                                                                                                                                                                                                                                                                                            Scripting

                                                                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                                                                            T1064

                                                                                                                                                                                                                                                                                            Persistence

                                                                                                                                                                                                                                                                                            Registry Run Keys / Startup Folder

                                                                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                                                                            T1060

                                                                                                                                                                                                                                                                                            Defense Evasion

                                                                                                                                                                                                                                                                                            Scripting

                                                                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                                                                            T1064

                                                                                                                                                                                                                                                                                            Modify Registry

                                                                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                                                                            T1112

                                                                                                                                                                                                                                                                                            Discovery

                                                                                                                                                                                                                                                                                            System Information Discovery

                                                                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                                                                            T1082

                                                                                                                                                                                                                                                                                            Collection

                                                                                                                                                                                                                                                                                            Email Collection

                                                                                                                                                                                                                                                                                            1
                                                                                                                                                                                                                                                                                            T1114

                                                                                                                                                                                                                                                                                            Replay Monitor

                                                                                                                                                                                                                                                                                            Loading Replay Monitor...

                                                                                                                                                                                                                                                                                            Downloads

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\BrokerInfrastructure.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              17KB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              4cd74165822090fb30ffd34f21a0429a

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              679c25004514e1ad69d01dc189c14222d94e9690

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              c75bc731cf056028b9d2ca8dead3178d916d77c062c0e3b04d6baee1c519ce55

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              f4d999714b7424eab49a7fafd45b10e49aeabe7d1b9f5e905b5633a4739aa8e4154bbdabd19f688151a58c548ac224992f796bc8436322d584f589de3ccf3854

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\BrokerInfrastructure.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              17KB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              4cd74165822090fb30ffd34f21a0429a

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              679c25004514e1ad69d01dc189c14222d94e9690

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              c75bc731cf056028b9d2ca8dead3178d916d77c062c0e3b04d6baee1c519ce55

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              f4d999714b7424eab49a7fafd45b10e49aeabe7d1b9f5e905b5633a4739aa8e4154bbdabd19f688151a58c548ac224992f796bc8436322d584f589de3ccf3854

                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Roaming\Microsoft\BrokerInfrastructure.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              17KB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              4cd74165822090fb30ffd34f21a0429a

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              679c25004514e1ad69d01dc189c14222d94e9690

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              c75bc731cf056028b9d2ca8dead3178d916d77c062c0e3b04d6baee1c519ce55

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              f4d999714b7424eab49a7fafd45b10e49aeabe7d1b9f5e905b5633a4739aa8e4154bbdabd19f688151a58c548ac224992f796bc8436322d584f589de3ccf3854

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\AudioEndpointBuilder.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              1.0MB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              dc03fdb0261a5e747cd3a83153be2df6

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              d27ce5f7f2947e7f914153d572025c6ab75792f3

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              60abc37cfc4bfc4ddd45356493f78ffd441d9fc133eee7b954d6d0350ffcabb2

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              83219bd8fade6479500a30fc0a249d188d569dd9cd802b7c508690b5540dd2e0c0e5f0f4cea1ed5756f2833e7f40adb19a2ce2d0fa2faf5431835faddcc85af1

                                                                                                                                                                                                                                                                                            • \Users\Admin\AppData\Roaming\Microsoft\BrokerInfrastructure.exe
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              17KB

                                                                                                                                                                                                                                                                                              MD5

                                                                                                                                                                                                                                                                                              4cd74165822090fb30ffd34f21a0429a

                                                                                                                                                                                                                                                                                              SHA1

                                                                                                                                                                                                                                                                                              679c25004514e1ad69d01dc189c14222d94e9690

                                                                                                                                                                                                                                                                                              SHA256

                                                                                                                                                                                                                                                                                              c75bc731cf056028b9d2ca8dead3178d916d77c062c0e3b04d6baee1c519ce55

                                                                                                                                                                                                                                                                                              SHA512

                                                                                                                                                                                                                                                                                              f4d999714b7424eab49a7fafd45b10e49aeabe7d1b9f5e905b5633a4739aa8e4154bbdabd19f688151a58c548ac224992f796bc8436322d584f589de3ccf3854

                                                                                                                                                                                                                                                                                            • memory/268-334-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/268-346-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/552-429-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/552-436-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/556-651-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/556-657-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/584-547-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/584-540-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/604-186-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/604-179-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/612-517-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/612-510-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/652-86-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/652-89-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/652-81-0x0000000000000000-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/676-201-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/676-194-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/716-369-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/716-376-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/816-406-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/816-399-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1000-155-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1000-148-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1036-612-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1036-618-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1048-525-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1048-532-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1096-671-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1096-664-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1096-672-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1104-55-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1104-54-0x0000000075BB1000-0x0000000075BB3000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              8KB

                                                                                                                                                                                                                                                                                            • memory/1104-56-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1160-561-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1160-555-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1176-60-0x0000000000230000-0x0000000000320000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              960KB

                                                                                                                                                                                                                                                                                            • memory/1176-65-0x0000000000230000-0x0000000000320000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              960KB

                                                                                                                                                                                                                                                                                            • memory/1176-64-0x0000000000230000-0x0000000000320000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              960KB

                                                                                                                                                                                                                                                                                            • memory/1176-63-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1176-72-0x0000000000230000-0x0000000000320000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              960KB

                                                                                                                                                                                                                                                                                            • memory/1176-57-0x0000000000230000-0x0000000000320000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              960KB

                                                                                                                                                                                                                                                                                            • memory/1176-58-0x0000000000230000-0x0000000000320000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              960KB

                                                                                                                                                                                                                                                                                            • memory/1176-84-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1176-69-0x0000000000230000-0x0000000000320000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              960KB

                                                                                                                                                                                                                                                                                            • memory/1176-87-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1176-61-0x0000000000230000-0x0000000000320000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              960KB

                                                                                                                                                                                                                                                                                            • memory/1180-414-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1180-421-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1240-291-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1240-279-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1256-118-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1256-125-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1264-494-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1264-501-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1352-486-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1352-479-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1420-140-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1420-133-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1448-75-0x0000000000000000-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1448-451-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1448-85-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1448-444-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1448-90-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1448-88-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1488-209-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1488-221-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1528-299-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1528-306-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1552-568-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1552-574-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1584-685-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1584-679-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1604-631-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1604-625-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1612-644-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1612-638-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1648-587-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1648-581-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1676-110-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1676-102-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1676-105-0x0000000000400000-0x00000000004F0000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              960KB

                                                                                                                                                                                                                                                                                            • memory/1676-107-0x0000000000400000-0x00000000004F0000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              960KB

                                                                                                                                                                                                                                                                                            • memory/1676-109-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1732-241-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1732-229-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1760-258-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1760-249-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1760-670-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1864-264-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1864-271-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1888-163-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1888-171-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1888-170-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1896-354-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1896-361-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1924-800-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1924-391-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1924-384-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1960-326-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/1960-314-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1984-459-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/1984-471-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/2008-594-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2008-605-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/2020-94-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/2020-91-0x0000000000000000-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2020-503-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/2036-934-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2064-703-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/2064-692-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2080-826-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/2080-820-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2224-833-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2268-710-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2268-716-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/2284-947-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2400-723-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2400-729-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/2408-846-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2428-960-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2508-742-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/2508-736-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2536-859-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2548-973-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2604-755-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/2604-749-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2644-872-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2676-986-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2696-768-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/2696-762-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2752-890-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2808-775-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2808-781-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/2872-903-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2904-799-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB

                                                                                                                                                                                                                                                                                            • memory/2904-788-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/2992-921-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/3024-807-0x00000000004EB17E-mapping.dmp
                                                                                                                                                                                                                                                                                            • memory/3024-813-0x0000000074760000-0x0000000074D0B000-memory.dmp
                                                                                                                                                                                                                                                                                              Filesize

                                                                                                                                                                                                                                                                                              5.7MB