d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

Analysis

max time kernel
163s
max time network
195s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
04/12/2022, 01:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de.exe
Size

14KB
MD5

0f7b83a7b401200766afbb5e93125bf0
SHA1

75ddbbf60d53e38c982fc5011ed5226d9e536f3b
SHA256

d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de
SHA512

779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9
SSDEEP

192:6vAURbI/LGnYaku/oNw/GeKWgJukkoeNqtwglmNyTQS+TmN97TJa:6De/LGnfkqoNHWg4kkItwydk4d9a

Score

8^/10

Malware Config

Signatures

Executes dropped EXE 64 IoCs

pid	Process
4148	nwizAsktao.exe
4876	nwizAsktao.exe
3616	nwizAsktao.exe
3648	nwizAsktao.exe
3324	nwizAsktao.exe
864	nwizAsktao.exe
524	nwizAsktao.exe
380	nwizAsktao.exe
2864	nwizAsktao.exe
5020	nwizAsktao.exe
612	nwizAsktao.exe
3568	nwizAsktao.exe
5096	nwizAsktao.exe
792	nwizAsktao.exe
540	nwizAsktao.exe
2564	nwizAsktao.exe
4360	nwizAsktao.exe
1904	nwizAsktao.exe
4796	nwizAsktao.exe
1700	nwizAsktao.exe
4148	nwizAsktao.exe
1368	nwizAsktao.exe
996	nwizAsktao.exe
5100	nwizAsktao.exe
1760	nwizAsktao.exe
4372	nwizAsktao.exe
4040	nwizAsktao.exe
3368	nwizAsktao.exe
2680	nwizAsktao.exe
2624	nwizAsktao.exe
372	nwizAsktao.exe
2172	nwizAsktao.exe
4748	nwizAsktao.exe
4496	nwizAsktao.exe
4076	nwizAsktao.exe
4744	nwizAsktao.exe
2532	nwizAsktao.exe
4580	nwizAsktao.exe
4260	nwizAsktao.exe
2940	nwizAsktao.exe
4828	nwizAsktao.exe
3420	nwizAsktao.exe
836	nwizAsktao.exe
5052	nwizAsktao.exe
2668	nwizAsktao.exe
5020	nwizAsktao.exe
5012	nwizAsktao.exe
4192	nwizAsktao.exe
3056	nwizAsktao.exe
4692	nwizAsktao.exe
1656	nwizAsktao.exe
1032	nwizAsktao.exe
2564	nwizAsktao.exe
672	nwizAsktao.exe
4456	nwizAsktao.exe
3820	nwizAsktao.exe
3364	nwizAsktao.exe
3188	nwizAsktao.exe
632	nwizAsktao.exe
3500	nwizAsktao.exe
4676	nwizAsktao.exe
4324	nwizAsktao.exe
2668	nwizAsktao.exe
2624	nwizAsktao.exe

Drops file in System32 directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe
File created	C:\Windows\SysWOW64\nwizAsktao.exe	nwizAsktao.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1128	d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de.exe
1128	d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de.exe
1128	d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de.exe
1128	d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de.exe
1128	d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de.exe
1128	d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de.exe
1128	d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de.exe
1128	d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de.exe
4148	nwizAsktao.exe
4148	nwizAsktao.exe
4148	nwizAsktao.exe
4148	nwizAsktao.exe
4148	nwizAsktao.exe
4148	nwizAsktao.exe
4148	nwizAsktao.exe
4148	nwizAsktao.exe
4876	nwizAsktao.exe
4876	nwizAsktao.exe
4876	nwizAsktao.exe
4876	nwizAsktao.exe
4876	nwizAsktao.exe
4876	nwizAsktao.exe
4876	nwizAsktao.exe
4876	nwizAsktao.exe
3616	nwizAsktao.exe
3616	nwizAsktao.exe
3616	nwizAsktao.exe
3616	nwizAsktao.exe
3616	nwizAsktao.exe
3616	nwizAsktao.exe
3616	nwizAsktao.exe
3616	nwizAsktao.exe
3648	nwizAsktao.exe
3648	nwizAsktao.exe
3648	nwizAsktao.exe
3648	nwizAsktao.exe
3648	nwizAsktao.exe
3648	nwizAsktao.exe
3648	nwizAsktao.exe
3648	nwizAsktao.exe
3324	nwizAsktao.exe
3324	nwizAsktao.exe
3324	nwizAsktao.exe
3324	nwizAsktao.exe
3324	nwizAsktao.exe
3324	nwizAsktao.exe
3324	nwizAsktao.exe
3324	nwizAsktao.exe
864	nwizAsktao.exe
864	nwizAsktao.exe
864	nwizAsktao.exe
864	nwizAsktao.exe
864	nwizAsktao.exe
864	nwizAsktao.exe
864	nwizAsktao.exe
864	nwizAsktao.exe
524	nwizAsktao.exe
524	nwizAsktao.exe
524	nwizAsktao.exe
524	nwizAsktao.exe
524	nwizAsktao.exe
524	nwizAsktao.exe
524	nwizAsktao.exe
524	nwizAsktao.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1128 wrote to memory of 4148	1128	d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de.exe	81
PID 1128 wrote to memory of 4148	1128	d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de.exe	81
PID 1128 wrote to memory of 4148	1128	d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de.exe	81
PID 1128 wrote to memory of 216	1128	d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de.exe	82
PID 1128 wrote to memory of 216	1128	d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de.exe	82
PID 1128 wrote to memory of 216	1128	d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de.exe	82
PID 4148 wrote to memory of 4876	4148	nwizAsktao.exe	84
PID 4148 wrote to memory of 4876	4148	nwizAsktao.exe	84
PID 4148 wrote to memory of 4876	4148	nwizAsktao.exe	84
PID 4148 wrote to memory of 1132	4148	nwizAsktao.exe	85
PID 4148 wrote to memory of 1132	4148	nwizAsktao.exe	85
PID 4148 wrote to memory of 1132	4148	nwizAsktao.exe	85
PID 4876 wrote to memory of 3616	4876	nwizAsktao.exe	87
PID 4876 wrote to memory of 3616	4876	nwizAsktao.exe	87
PID 4876 wrote to memory of 3616	4876	nwizAsktao.exe	87
PID 4876 wrote to memory of 4592	4876	nwizAsktao.exe	88
PID 4876 wrote to memory of 4592	4876	nwizAsktao.exe	88
PID 4876 wrote to memory of 4592	4876	nwizAsktao.exe	88
PID 3616 wrote to memory of 3648	3616	nwizAsktao.exe	90
PID 3616 wrote to memory of 3648	3616	nwizAsktao.exe	90
PID 3616 wrote to memory of 3648	3616	nwizAsktao.exe	90
PID 3616 wrote to memory of 2224	3616	nwizAsktao.exe	91
PID 3616 wrote to memory of 2224	3616	nwizAsktao.exe	91
PID 3616 wrote to memory of 2224	3616	nwizAsktao.exe	91
PID 3648 wrote to memory of 3324	3648	nwizAsktao.exe	93
PID 3648 wrote to memory of 3324	3648	nwizAsktao.exe	93
PID 3648 wrote to memory of 3324	3648	nwizAsktao.exe	93
PID 3648 wrote to memory of 4940	3648	nwizAsktao.exe	94
PID 3648 wrote to memory of 4940	3648	nwizAsktao.exe	94
PID 3648 wrote to memory of 4940	3648	nwizAsktao.exe	94
PID 3324 wrote to memory of 864	3324	nwizAsktao.exe	96
PID 3324 wrote to memory of 864	3324	nwizAsktao.exe	96
PID 3324 wrote to memory of 864	3324	nwizAsktao.exe	96
PID 3324 wrote to memory of 3580	3324	nwizAsktao.exe	97
PID 3324 wrote to memory of 3580	3324	nwizAsktao.exe	97
PID 3324 wrote to memory of 3580	3324	nwizAsktao.exe	97
PID 864 wrote to memory of 524	864	nwizAsktao.exe	99
PID 864 wrote to memory of 524	864	nwizAsktao.exe	99
PID 864 wrote to memory of 524	864	nwizAsktao.exe	99
PID 864 wrote to memory of 3352	864	nwizAsktao.exe	100
PID 864 wrote to memory of 3352	864	nwizAsktao.exe	100
PID 864 wrote to memory of 3352	864	nwizAsktao.exe	100
PID 524 wrote to memory of 380	524	nwizAsktao.exe	102
PID 524 wrote to memory of 380	524	nwizAsktao.exe	102
PID 524 wrote to memory of 380	524	nwizAsktao.exe	102
PID 524 wrote to memory of 4024	524	nwizAsktao.exe	103
PID 524 wrote to memory of 4024	524	nwizAsktao.exe	103
PID 524 wrote to memory of 4024	524	nwizAsktao.exe	103
PID 380 wrote to memory of 2864	380	nwizAsktao.exe	105
PID 380 wrote to memory of 2864	380	nwizAsktao.exe	105
PID 380 wrote to memory of 2864	380	nwizAsktao.exe	105
PID 380 wrote to memory of 820	380	nwizAsktao.exe	106
PID 380 wrote to memory of 820	380	nwizAsktao.exe	106
PID 380 wrote to memory of 820	380	nwizAsktao.exe	106
PID 2864 wrote to memory of 5020	2864	nwizAsktao.exe	108
PID 2864 wrote to memory of 5020	2864	nwizAsktao.exe	108
PID 2864 wrote to memory of 5020	2864	nwizAsktao.exe	108
PID 2864 wrote to memory of 2524	2864	nwizAsktao.exe	109
PID 2864 wrote to memory of 2524	2864	nwizAsktao.exe	109
PID 2864 wrote to memory of 2524	2864	nwizAsktao.exe	109
PID 5020 wrote to memory of 612	5020	nwizAsktao.exe	111
PID 5020 wrote to memory of 612	5020	nwizAsktao.exe	111
PID 5020 wrote to memory of 612	5020	nwizAsktao.exe	111
PID 5020 wrote to memory of 2732	5020	nwizAsktao.exe	112

C:\Users\Admin\AppData\Local\Temp\d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de.exe
"C:\Users\Admin\AppData\Local\Temp\d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de.exe"
1⤵
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1128
- C:\Windows\SysWOW64\nwizAsktao.exe
  C:\Windows\system32\nwizAsktao.exe
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:4148
- - C:\Windows\SysWOW64\nwizAsktao.exe
    C:\Windows\system32\nwizAsktao.exe
    3⤵
    - Executes dropped EXE
    - Drops file in System32 directory
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:4876
  - - C:\Windows\SysWOW64\nwizAsktao.exe
      C:\Windows\system32\nwizAsktao.exe
      4⤵
      Executes dropped EXE
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of WriteProcessMemory
      PID:3616
    - - C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        5⤵
        Executes dropped EXE
        Drops file in System32 directory
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:3648
      - C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        6⤵
        Executes dropped EXE
        Drops file in System32 directory
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:3324
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        7⤵
        Executes dropped EXE
        Drops file in System32 directory
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:864
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        8⤵
        Executes dropped EXE
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:524
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        9⤵
        Executes dropped EXE
        Drops file in System32 directory
        Suspicious use of WriteProcessMemory
        
        PID:380
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        10⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2864
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        11⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5020
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        12⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:612
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        13⤵
        Executes dropped EXE
        
        PID:3568
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        14⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:5096
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        15⤵
        Executes dropped EXE
        
        PID:792
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        16⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:540
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        17⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:2564
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        18⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:4360
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        19⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:1904
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        20⤵
        Executes dropped EXE
        
        PID:4796
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        21⤵
        Executes dropped EXE
        
        PID:1700
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        22⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:4148
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        23⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:1368
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        24⤵
        Executes dropped EXE
        
        PID:996
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        25⤵
        Executes dropped EXE
        
        PID:5100
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        26⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:1760
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        27⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:4372
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        28⤵
        Executes dropped EXE
        
        PID:4040
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        29⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:3368
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        30⤵
        Executes dropped EXE
        
        PID:2680
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        31⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:2624
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        32⤵
        Executes dropped EXE
        
        PID:372
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        33⤵
        Executes dropped EXE
        
        PID:2172
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        34⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:4748
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        35⤵
        Executes dropped EXE
        
        PID:4496
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        36⤵
        Executes dropped EXE
        
        PID:4076
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        37⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:4744
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        38⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:2532
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        39⤵
        Executes dropped EXE
        
        PID:4580
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        40⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:4260
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        41⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:2940
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        42⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:4828
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        43⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:3420
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        44⤵
        Executes dropped EXE
        
        PID:836
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        45⤵
        Executes dropped EXE
        
        PID:5052
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        46⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:2668
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        47⤵
        Executes dropped EXE
        
        PID:5020
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        48⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:5012
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        49⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:4192
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        50⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:3056
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        51⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:4692
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        52⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:1656
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        53⤵
        Executes dropped EXE
        
        PID:1032
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        54⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:2564
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        55⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:672
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        56⤵
        Executes dropped EXE
        
        PID:4456
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        57⤵
        Executes dropped EXE
        
        PID:3820
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        58⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:3364
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        59⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:3188
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        60⤵
        Executes dropped EXE
        
        PID:632
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        61⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:3500
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        62⤵
        Executes dropped EXE
        
        PID:4676
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        63⤵
        Executes dropped EXE
        
        PID:4324
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        64⤵
        Executes dropped EXE
        Drops file in System32 directory
        
        PID:2668
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        65⤵
        Executes dropped EXE
        
        PID:2624
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        66⤵
        Drops file in System32 directory
        
        PID:4972
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        67⤵
        
        PID:2768
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        68⤵
        Drops file in System32 directory
        
        PID:4296
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        69⤵
        
        PID:4228
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        70⤵
        
        PID:5096
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        71⤵
        
        PID:4076
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        72⤵
        
        PID:388
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        73⤵
        
        PID:4852
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        74⤵
        Drops file in System32 directory
        
        PID:216
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        75⤵
        
        PID:3228
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        76⤵
        Drops file in System32 directory
        
        PID:4212
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        77⤵
        Drops file in System32 directory
        
        PID:3816
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        78⤵
        
        PID:2224
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        79⤵
        Drops file in System32 directory
        
        PID:4048
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        80⤵
        Drops file in System32 directory
        
        PID:3216
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        81⤵
        
        PID:836
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        82⤵
        Drops file in System32 directory
        
        PID:3896
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        83⤵
        
        PID:2524
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        84⤵
        
        PID:1496
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        85⤵
        Drops file in System32 directory
        
        PID:612
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        86⤵
        Drops file in System32 directory
        
        PID:1748
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        87⤵
        
        PID:2168
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        88⤵
        Drops file in System32 directory
        
        PID:3900
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        89⤵
        Drops file in System32 directory
        
        PID:3204
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        90⤵
        Drops file in System32 directory
        
        PID:3520
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        91⤵
        Drops file in System32 directory
        
        PID:4832
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        92⤵
        
        PID:3352
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        93⤵
        
        PID:3044
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        94⤵
        
        PID:4580
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        95⤵
        
        PID:3476
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        95⤵
        Drops file in System32 directory
        
        PID:1644
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        96⤵
        
        PID:3468
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        97⤵
        
        PID:3412
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        98⤵
        Drops file in System32 directory
        
        PID:5024
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        99⤵
        Drops file in System32 directory
        
        PID:4140
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        100⤵
        
        PID:4448
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        101⤵
        Drops file in System32 directory
        
        PID:4632
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        102⤵
        
        PID:1504
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        103⤵
        Drops file in System32 directory
        
        PID:3112
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        104⤵
        Drops file in System32 directory
        
        PID:5012
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        105⤵
        Drops file in System32 directory
        
        PID:4308
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        106⤵
        
        PID:3052
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        107⤵
        Drops file in System32 directory
        
        PID:2800
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        108⤵
        Drops file in System32 directory
        
        PID:4736
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        109⤵
        Drops file in System32 directory
        
        PID:4288
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        110⤵
        
        PID:2572
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        111⤵
        Drops file in System32 directory
        
        PID:4852
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        112⤵
        Drops file in System32 directory
        
        PID:3272
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        113⤵
        
        PID:1268
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        114⤵
        
        PID:4948
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        115⤵
        
        PID:3616
        
        C:\Windows\SysWOW64\nwizAsktao.exe
        
        C:\Windows\system32\nwizAsktao.exe
        116⤵
        
        PID:3176
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        116⤵
        
        PID:5056
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        115⤵
        
        PID:3612
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        114⤵
        
        PID:4564
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        113⤵
        
        PID:3756
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        112⤵
        
        PID:1080
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        111⤵
        
        PID:3544
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        110⤵
        
        PID:4236
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        109⤵
        
        PID:388
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        108⤵
        
        PID:4304
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        107⤵
        
        PID:1032
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        106⤵
        
        PID:3532
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        105⤵
        
        PID:4176
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        104⤵
        
        PID:5072
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        103⤵
        
        PID:2988
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        102⤵
        
        PID:4660
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        101⤵
        
        PID:4444
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        100⤵
        
        PID:4324
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        99⤵
        
        PID:3368
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        98⤵
        
        PID:4412
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        97⤵
        
        PID:3652
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        96⤵
        
        PID:2796
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        94⤵
        
        PID:4948
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        93⤵
        
        PID:2772
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        92⤵
        
        PID:4868
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        91⤵
        
        PID:3136
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        90⤵
        
        PID:2872
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        89⤵
        
        PID:4624
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        88⤵
        
        PID:2368
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        87⤵
        
        PID:4600
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        86⤵
        
        PID:1552
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        85⤵
        
        PID:4408
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        84⤵
        
        PID:2332
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        83⤵
        
        PID:5116
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        82⤵
        
        PID:5060
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        81⤵
        
        PID:4652
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        80⤵
        
        PID:3668
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        79⤵
        
        PID:3188
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        78⤵
        
        PID:1368
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        77⤵
        
        PID:3264
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        76⤵
        
        PID:2044
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        75⤵
        
        PID:2772
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        74⤵
        
        PID:1080
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        73⤵
        
        PID:4188
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        72⤵
        
        PID:1200
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        71⤵
        
        PID:4360
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        70⤵
        
        PID:3128
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        69⤵
        
        PID:4748
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        68⤵
        
        PID:4152
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        67⤵
        
        PID:4276
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        66⤵
        
        PID:4576
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        65⤵
        
        PID:4316
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        64⤵
        
        PID:2332
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        63⤵
        
        PID:896
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        62⤵
        
        PID:4672
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        61⤵
        
        PID:5080
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        60⤵
        
        PID:524
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        59⤵
        
        PID:1428
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        58⤵
        
        PID:4400
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        57⤵
        
        PID:4212
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        56⤵
        
        PID:1904
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        55⤵
        
        PID:4696
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        54⤵
        
        PID:4000
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        53⤵
        
        PID:2348
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        52⤵
        
        PID:736
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        51⤵
        
        PID:2404
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        50⤵
        
        PID:3308
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        49⤵
        
        PID:4328
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        48⤵
        
        PID:4888
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        47⤵
        
        PID:4660
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        46⤵
        
        PID:4480
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        45⤵
        
        PID:4604
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        44⤵
        
        PID:3724
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        43⤵
        
        PID:2196
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        42⤵
        
        PID:1264
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        41⤵
        
        PID:2796
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        40⤵
        
        PID:1132
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        39⤵
        
        PID:4200
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        38⤵
        
        PID:4036
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        37⤵
        
        PID:3204
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        36⤵
        
        PID:3900
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        35⤵
        
        PID:3340
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        34⤵
        
        PID:332
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        33⤵
        
        PID:3568
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        32⤵
        
        PID:612
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        31⤵
        
        PID:2896
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        30⤵
        
        PID:896
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        29⤵
        
        PID:3896
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        28⤵
        
        PID:3064
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        27⤵
        
        PID:2868
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        26⤵
        
        PID:3984
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        25⤵
        
        PID:2008
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        24⤵
        
        PID:2224
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        23⤵
        
        PID:4384
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        22⤵
        
        PID:3772
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        21⤵
        
        PID:2568
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        20⤵
        
        PID:4808
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        19⤵
        
        PID:2532
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        18⤵
        
        PID:3864
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        17⤵
        
        PID:3084
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        16⤵
        
        PID:1380
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        15⤵
        
        PID:3060
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        14⤵
        
        PID:3656
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        13⤵
        
        PID:4976
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        12⤵
        
        PID:2732
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        11⤵
        
        PID:2524
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        10⤵
        
        PID:820
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        9⤵
        
        PID:4024
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        8⤵
        
        PID:3352
        
        C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        7⤵
        
        PID:3580
      - C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        6⤵
        
        PID:4940
    - - C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
        5⤵
        
        PID:2224
  - - C:\Windows\SysWOW64\cmd.exe
      C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
      4⤵
      PID:4592
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c del "C:\Windows\SysWOW64\nwizAsktao.exe"
    3⤵
    PID:1132
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c del "C:\Users\Admin\AppData\Local\Temp\d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de.exe"
  2⤵
  PID:216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
C:\Windows\SysWOW64\nwizAsktao.exe

Filesize
14KB

MD5
0f7b83a7b401200766afbb5e93125bf0

SHA1
75ddbbf60d53e38c982fc5011ed5226d9e536f3b

SHA256
d0ad1e00bf6b19928ac123a12a3991922b7145a2c1f0ebbbc41b70a85a3281de

SHA512
779fcafd52ffae161aef9ceaa3b054a03ed77a1c65f0f34a74f940c5d4c486a0d0f16f67efd070a6da50a675383602dbac00468aab8f3d1594be60af5c728bc9

Download Submit
memory/1128-132-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download
memory/1128-137-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download
memory/4148-138-0x0000000000400000-0x0000000000405000-memory.dmp

Filesize
20KB

Download