Analysis
-
max time kernel
37s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
05/12/2022, 17:26
Static task
static1
Behavioral task
behavioral1
Sample
abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe
Resource
win10v2004-20220812-en
General
-
Target
abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe
-
Size
2.2MB
-
MD5
dc5ad79fef7a1818501821bbc20df5bf
-
SHA1
c73ff6b323ed9e5ee901338c3c205a8090a05a7f
-
SHA256
abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896
-
SHA512
1a0fa1f0c68ec9e358997a05957c5474271dc37d9aca23b5ea981612d71489d2536caffbb06a22df35863697c7262074807ddcf580989730b2828703408645d8
-
SSDEEP
49152:NKxCZWZwrPQTmJ56UcLfj4SgOJ0qWZRsU2/PrdSE923:oAZWZEQTWQbj2OJrYRsU2nU3
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1640 wrote to memory of 952 1640 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 27 PID 1640 wrote to memory of 952 1640 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 27 PID 1640 wrote to memory of 952 1640 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 27 PID 1640 wrote to memory of 952 1640 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 27 PID 952 wrote to memory of 912 952 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 28 PID 952 wrote to memory of 912 952 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 28 PID 952 wrote to memory of 912 952 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 28 PID 952 wrote to memory of 912 952 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 28 PID 912 wrote to memory of 468 912 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 29 PID 912 wrote to memory of 468 912 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 29 PID 912 wrote to memory of 468 912 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 29 PID 912 wrote to memory of 468 912 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 29 PID 468 wrote to memory of 1620 468 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 30 PID 468 wrote to memory of 1620 468 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 30 PID 468 wrote to memory of 1620 468 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 30 PID 468 wrote to memory of 1620 468 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 30 PID 1620 wrote to memory of 1996 1620 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 31 PID 1620 wrote to memory of 1996 1620 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 31 PID 1620 wrote to memory of 1996 1620 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 31 PID 1620 wrote to memory of 1996 1620 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 31 PID 1996 wrote to memory of 1528 1996 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 32 PID 1996 wrote to memory of 1528 1996 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 32 PID 1996 wrote to memory of 1528 1996 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 32 PID 1996 wrote to memory of 1528 1996 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 32 PID 1528 wrote to memory of 1436 1528 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 33 PID 1528 wrote to memory of 1436 1528 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 33 PID 1528 wrote to memory of 1436 1528 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 33 PID 1528 wrote to memory of 1436 1528 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 33 PID 1436 wrote to memory of 1980 1436 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 34 PID 1436 wrote to memory of 1980 1436 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 34 PID 1436 wrote to memory of 1980 1436 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 34 PID 1436 wrote to memory of 1980 1436 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 34 PID 1980 wrote to memory of 1600 1980 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 35 PID 1980 wrote to memory of 1600 1980 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 35 PID 1980 wrote to memory of 1600 1980 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 35 PID 1980 wrote to memory of 1600 1980 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 35 PID 1600 wrote to memory of 1052 1600 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 36 PID 1600 wrote to memory of 1052 1600 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 36 PID 1600 wrote to memory of 1052 1600 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 36 PID 1600 wrote to memory of 1052 1600 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 36 PID 1052 wrote to memory of 1632 1052 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 37 PID 1052 wrote to memory of 1632 1052 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 37 PID 1052 wrote to memory of 1632 1052 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 37 PID 1052 wrote to memory of 1632 1052 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 37 PID 1632 wrote to memory of 556 1632 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 38 PID 1632 wrote to memory of 556 1632 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 38 PID 1632 wrote to memory of 556 1632 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 38 PID 1632 wrote to memory of 556 1632 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 38 PID 556 wrote to memory of 1012 556 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 39 PID 556 wrote to memory of 1012 556 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 39 PID 556 wrote to memory of 1012 556 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 39 PID 556 wrote to memory of 1012 556 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 39 PID 1012 wrote to memory of 1468 1012 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 40 PID 1012 wrote to memory of 1468 1012 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 40 PID 1012 wrote to memory of 1468 1012 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 40 PID 1012 wrote to memory of 1468 1012 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 40 PID 1468 wrote to memory of 1620 1468 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 41 PID 1468 wrote to memory of 1620 1468 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 41 PID 1468 wrote to memory of 1620 1468 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 41 PID 1468 wrote to memory of 1620 1468 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 41 PID 1620 wrote to memory of 1772 1620 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 42 PID 1620 wrote to memory of 1772 1620 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 42 PID 1620 wrote to memory of 1772 1620 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 42 PID 1620 wrote to memory of 1772 1620 abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe 42
Processes
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1640 -
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"2⤵
- Suspicious use of WriteProcessMemory
PID:952 -
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"3⤵
- Suspicious use of WriteProcessMemory
PID:912 -
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"4⤵
- Suspicious use of WriteProcessMemory
PID:468 -
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"5⤵
- Suspicious use of WriteProcessMemory
PID:1620 -
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"6⤵
- Suspicious use of WriteProcessMemory
PID:1996 -
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"7⤵
- Suspicious use of WriteProcessMemory
PID:1528 -
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"8⤵
- Suspicious use of WriteProcessMemory
PID:1436 -
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"9⤵
- Suspicious use of WriteProcessMemory
PID:1980 -
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"10⤵
- Suspicious use of WriteProcessMemory
PID:1600 -
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"11⤵
- Suspicious use of WriteProcessMemory
PID:1052 -
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"12⤵
- Suspicious use of WriteProcessMemory
PID:1632 -
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"13⤵
- Suspicious use of WriteProcessMemory
PID:556 -
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"14⤵
- Suspicious use of WriteProcessMemory
PID:1012 -
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"15⤵
- Suspicious use of WriteProcessMemory
PID:1468 -
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"16⤵
- Suspicious use of WriteProcessMemory
PID:1620 -
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"17⤵PID:1772
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"18⤵PID:1056
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"19⤵PID:1692
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"20⤵PID:1984
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"21⤵PID:1756
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"22⤵PID:1408
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"23⤵PID:1800
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"24⤵PID:1664
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"25⤵PID:1140
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"26⤵PID:1528
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"27⤵PID:112
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"28⤵PID:1040
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"29⤵PID:1628
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"30⤵PID:1600
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"31⤵PID:1020
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"32⤵PID:520
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"33⤵PID:1612
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"34⤵PID:1616
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"35⤵PID:1748
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"36⤵PID:1496
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"37⤵PID:1500
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"38⤵PID:1652
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"39⤵PID:1220
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"40⤵PID:1336
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"41⤵PID:1640
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"42⤵PID:1164
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"43⤵PID:1572
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"44⤵PID:1660
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"45⤵PID:2008
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"46⤵PID:112
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"47⤵PID:1980
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"48⤵PID:1324
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"49⤵PID:1840
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"50⤵PID:664
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"51⤵PID:576
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"52⤵PID:900
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"53⤵PID:1400
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"54⤵PID:1736
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"55⤵PID:1952
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"56⤵PID:840
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"57⤵PID:1348
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"58⤵PID:1224
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"59⤵PID:980
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"60⤵PID:1020
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"61⤵PID:556
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"62⤵PID:1592
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"63⤵PID:1140
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"64⤵PID:1496
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"65⤵PID:2012
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"66⤵PID:280
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"67⤵PID:972
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"68⤵PID:908
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"69⤵PID:1840
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"70⤵PID:1800
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"71⤵PID:1624
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"72⤵PID:1664
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"73⤵PID:1592
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"74⤵PID:1240
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"75⤵PID:436
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"76⤵PID:1304
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"77⤵PID:1520
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"78⤵PID:1372
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"79⤵PID:1824
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"80⤵PID:1996
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"81⤵PID:1012
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"82⤵PID:1156
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"83⤵PID:1724
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"84⤵PID:836
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"85⤵PID:1736
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"86⤵PID:840
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"87⤵PID:1040
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"88⤵PID:1304
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"89⤵PID:1520
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"90⤵PID:908
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"91⤵PID:1420
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"92⤵PID:928
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"93⤵PID:1616
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"94⤵PID:1540
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"95⤵PID:1528
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"96⤵PID:1444
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"97⤵PID:2012
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"98⤵PID:280
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"99⤵PID:1632
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"100⤵PID:1172
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"101⤵PID:568
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"102⤵PID:1640
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"103⤵PID:1420
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"104⤵PID:1020
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"105⤵PID:1608
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"106⤵PID:1692
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"107⤵PID:1976
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"108⤵PID:272
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"109⤵PID:1952
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"110⤵PID:1040
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"111⤵PID:980
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"112⤵PID:1128
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"113⤵PID:1584
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"114⤵PID:1640
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"115⤵PID:1140
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"116⤵PID:1496
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"117⤵PID:836
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"118⤵PID:1796
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"119⤵PID:1212
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"120⤵PID:1232
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"121⤵PID:1320
-
C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"C:\Users\Admin\AppData\Local\Temp\abff67bc897bedda28c095a47609951f6524881b6fbacce1001de8bf20e5f896.exe"122⤵PID:1408
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-