Analysis
-
max time kernel
150s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
12-01-2023 15:05
Static task
static1
Behavioral task
behavioral1
Sample
007556d5a71f6dd74f0b5a9778cf31ff.exe
Resource
win7-20221111-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
007556d5a71f6dd74f0b5a9778cf31ff.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
11 signatures
150 seconds
General
-
Target
007556d5a71f6dd74f0b5a9778cf31ff.exe
-
Size
476KB
-
MD5
007556d5a71f6dd74f0b5a9778cf31ff
-
SHA1
ada81ef2208703f22b1fe99f7342927bc9640dd6
-
SHA256
e24d753b84d8ca4411b4157a300baea0e41cfdb04e6f0bb437b4273110f89d53
-
SHA512
9cbe5768e5b9c86cc4b8ed7f55122747acbe828ac295831082e793eaa76ab6cf169602a7fa28355ebec6b8722d2abbec634c33d148c93f456fa5a13d317769d2
-
SSDEEP
12288:5js193PQAW630ZwDAiu/7mmtfOD6IybGr2XTd:5bL630ZhZz1tfYTyboM
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: MapViewOfSection 64 IoCs
pid Process 1720 007556d5a71f6dd74f0b5a9778cf31ff.exe 1720 007556d5a71f6dd74f0b5a9778cf31ff.exe 1276 007556d5a71f6dd74f0b5a9778cf31ff.exe 1276 007556d5a71f6dd74f0b5a9778cf31ff.exe 992 007556d5a71f6dd74f0b5a9778cf31ff.exe 692 007556d5a71f6dd74f0b5a9778cf31ff.exe 2036 007556d5a71f6dd74f0b5a9778cf31ff.exe 364 007556d5a71f6dd74f0b5a9778cf31ff.exe 1472 007556d5a71f6dd74f0b5a9778cf31ff.exe 1784 007556d5a71f6dd74f0b5a9778cf31ff.exe 1860 007556d5a71f6dd74f0b5a9778cf31ff.exe 1684 007556d5a71f6dd74f0b5a9778cf31ff.exe 904 007556d5a71f6dd74f0b5a9778cf31ff.exe 1292 007556d5a71f6dd74f0b5a9778cf31ff.exe 1612 007556d5a71f6dd74f0b5a9778cf31ff.exe 1612 007556d5a71f6dd74f0b5a9778cf31ff.exe 1696 007556d5a71f6dd74f0b5a9778cf31ff.exe 1172 007556d5a71f6dd74f0b5a9778cf31ff.exe 956 007556d5a71f6dd74f0b5a9778cf31ff.exe 1976 007556d5a71f6dd74f0b5a9778cf31ff.exe 1788 007556d5a71f6dd74f0b5a9778cf31ff.exe 1768 007556d5a71f6dd74f0b5a9778cf31ff.exe 1768 007556d5a71f6dd74f0b5a9778cf31ff.exe 2012 007556d5a71f6dd74f0b5a9778cf31ff.exe 340 007556d5a71f6dd74f0b5a9778cf31ff.exe 1948 007556d5a71f6dd74f0b5a9778cf31ff.exe 912 007556d5a71f6dd74f0b5a9778cf31ff.exe 680 007556d5a71f6dd74f0b5a9778cf31ff.exe 568 007556d5a71f6dd74f0b5a9778cf31ff.exe 764 007556d5a71f6dd74f0b5a9778cf31ff.exe 2032 007556d5a71f6dd74f0b5a9778cf31ff.exe 1588 007556d5a71f6dd74f0b5a9778cf31ff.exe 1312 007556d5a71f6dd74f0b5a9778cf31ff.exe 1580 007556d5a71f6dd74f0b5a9778cf31ff.exe 1544 007556d5a71f6dd74f0b5a9778cf31ff.exe 1540 007556d5a71f6dd74f0b5a9778cf31ff.exe 1412 007556d5a71f6dd74f0b5a9778cf31ff.exe 868 007556d5a71f6dd74f0b5a9778cf31ff.exe 868 007556d5a71f6dd74f0b5a9778cf31ff.exe 1224 007556d5a71f6dd74f0b5a9778cf31ff.exe 1320 007556d5a71f6dd74f0b5a9778cf31ff.exe 1584 007556d5a71f6dd74f0b5a9778cf31ff.exe 1804 007556d5a71f6dd74f0b5a9778cf31ff.exe 1700 007556d5a71f6dd74f0b5a9778cf31ff.exe 1072 007556d5a71f6dd74f0b5a9778cf31ff.exe 1072 007556d5a71f6dd74f0b5a9778cf31ff.exe 1968 007556d5a71f6dd74f0b5a9778cf31ff.exe 1632 007556d5a71f6dd74f0b5a9778cf31ff.exe 1632 007556d5a71f6dd74f0b5a9778cf31ff.exe 1964 007556d5a71f6dd74f0b5a9778cf31ff.exe 1720 007556d5a71f6dd74f0b5a9778cf31ff.exe 1720 007556d5a71f6dd74f0b5a9778cf31ff.exe 768 007556d5a71f6dd74f0b5a9778cf31ff.exe 512 007556d5a71f6dd74f0b5a9778cf31ff.exe 560 007556d5a71f6dd74f0b5a9778cf31ff.exe 2036 007556d5a71f6dd74f0b5a9778cf31ff.exe 364 007556d5a71f6dd74f0b5a9778cf31ff.exe 1688 007556d5a71f6dd74f0b5a9778cf31ff.exe 928 007556d5a71f6dd74f0b5a9778cf31ff.exe 1404 007556d5a71f6dd74f0b5a9778cf31ff.exe 1132 007556d5a71f6dd74f0b5a9778cf31ff.exe 1016 007556d5a71f6dd74f0b5a9778cf31ff.exe 1016 007556d5a71f6dd74f0b5a9778cf31ff.exe 848 007556d5a71f6dd74f0b5a9778cf31ff.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1720 wrote to memory of 1736 1720 007556d5a71f6dd74f0b5a9778cf31ff.exe 29 PID 1720 wrote to memory of 1736 1720 007556d5a71f6dd74f0b5a9778cf31ff.exe 29 PID 1720 wrote to memory of 1736 1720 007556d5a71f6dd74f0b5a9778cf31ff.exe 29 PID 1720 wrote to memory of 1736 1720 007556d5a71f6dd74f0b5a9778cf31ff.exe 29 PID 1720 wrote to memory of 1736 1720 007556d5a71f6dd74f0b5a9778cf31ff.exe 29 PID 1720 wrote to memory of 1276 1720 007556d5a71f6dd74f0b5a9778cf31ff.exe 30 PID 1720 wrote to memory of 1276 1720 007556d5a71f6dd74f0b5a9778cf31ff.exe 30 PID 1720 wrote to memory of 1276 1720 007556d5a71f6dd74f0b5a9778cf31ff.exe 30 PID 1720 wrote to memory of 1276 1720 007556d5a71f6dd74f0b5a9778cf31ff.exe 30 PID 1276 wrote to memory of 1692 1276 007556d5a71f6dd74f0b5a9778cf31ff.exe 31 PID 1276 wrote to memory of 1692 1276 007556d5a71f6dd74f0b5a9778cf31ff.exe 31 PID 1276 wrote to memory of 1692 1276 007556d5a71f6dd74f0b5a9778cf31ff.exe 31 PID 1276 wrote to memory of 1692 1276 007556d5a71f6dd74f0b5a9778cf31ff.exe 31 PID 1276 wrote to memory of 1692 1276 007556d5a71f6dd74f0b5a9778cf31ff.exe 31 PID 1276 wrote to memory of 992 1276 007556d5a71f6dd74f0b5a9778cf31ff.exe 32 PID 1276 wrote to memory of 992 1276 007556d5a71f6dd74f0b5a9778cf31ff.exe 32 PID 1276 wrote to memory of 992 1276 007556d5a71f6dd74f0b5a9778cf31ff.exe 32 PID 1276 wrote to memory of 992 1276 007556d5a71f6dd74f0b5a9778cf31ff.exe 32 PID 992 wrote to memory of 468 992 007556d5a71f6dd74f0b5a9778cf31ff.exe 33 PID 992 wrote to memory of 468 992 007556d5a71f6dd74f0b5a9778cf31ff.exe 33 PID 992 wrote to memory of 468 992 007556d5a71f6dd74f0b5a9778cf31ff.exe 33 PID 992 wrote to memory of 468 992 007556d5a71f6dd74f0b5a9778cf31ff.exe 33 PID 992 wrote to memory of 468 992 007556d5a71f6dd74f0b5a9778cf31ff.exe 33 PID 992 wrote to memory of 692 992 007556d5a71f6dd74f0b5a9778cf31ff.exe 34 PID 992 wrote to memory of 692 992 007556d5a71f6dd74f0b5a9778cf31ff.exe 34 PID 992 wrote to memory of 692 992 007556d5a71f6dd74f0b5a9778cf31ff.exe 34 PID 992 wrote to memory of 692 992 007556d5a71f6dd74f0b5a9778cf31ff.exe 34 PID 692 wrote to memory of 1500 692 007556d5a71f6dd74f0b5a9778cf31ff.exe 35 PID 692 wrote to memory of 1500 692 007556d5a71f6dd74f0b5a9778cf31ff.exe 35 PID 692 wrote to memory of 1500 692 007556d5a71f6dd74f0b5a9778cf31ff.exe 35 PID 692 wrote to memory of 1500 692 007556d5a71f6dd74f0b5a9778cf31ff.exe 35 PID 692 wrote to memory of 1500 692 007556d5a71f6dd74f0b5a9778cf31ff.exe 35 PID 692 wrote to memory of 2036 692 007556d5a71f6dd74f0b5a9778cf31ff.exe 36 PID 692 wrote to memory of 2036 692 007556d5a71f6dd74f0b5a9778cf31ff.exe 36 PID 692 wrote to memory of 2036 692 007556d5a71f6dd74f0b5a9778cf31ff.exe 36 PID 692 wrote to memory of 2036 692 007556d5a71f6dd74f0b5a9778cf31ff.exe 36 PID 2036 wrote to memory of 268 2036 007556d5a71f6dd74f0b5a9778cf31ff.exe 37 PID 2036 wrote to memory of 268 2036 007556d5a71f6dd74f0b5a9778cf31ff.exe 37 PID 2036 wrote to memory of 268 2036 007556d5a71f6dd74f0b5a9778cf31ff.exe 37 PID 2036 wrote to memory of 268 2036 007556d5a71f6dd74f0b5a9778cf31ff.exe 37 PID 2036 wrote to memory of 268 2036 007556d5a71f6dd74f0b5a9778cf31ff.exe 37 PID 2036 wrote to memory of 364 2036 007556d5a71f6dd74f0b5a9778cf31ff.exe 38 PID 2036 wrote to memory of 364 2036 007556d5a71f6dd74f0b5a9778cf31ff.exe 38 PID 2036 wrote to memory of 364 2036 007556d5a71f6dd74f0b5a9778cf31ff.exe 38 PID 2036 wrote to memory of 364 2036 007556d5a71f6dd74f0b5a9778cf31ff.exe 38 PID 364 wrote to memory of 1328 364 007556d5a71f6dd74f0b5a9778cf31ff.exe 39 PID 364 wrote to memory of 1328 364 007556d5a71f6dd74f0b5a9778cf31ff.exe 39 PID 364 wrote to memory of 1328 364 007556d5a71f6dd74f0b5a9778cf31ff.exe 39 PID 364 wrote to memory of 1328 364 007556d5a71f6dd74f0b5a9778cf31ff.exe 39 PID 364 wrote to memory of 1328 364 007556d5a71f6dd74f0b5a9778cf31ff.exe 39 PID 364 wrote to memory of 1472 364 007556d5a71f6dd74f0b5a9778cf31ff.exe 40 PID 364 wrote to memory of 1472 364 007556d5a71f6dd74f0b5a9778cf31ff.exe 40 PID 364 wrote to memory of 1472 364 007556d5a71f6dd74f0b5a9778cf31ff.exe 40 PID 364 wrote to memory of 1472 364 007556d5a71f6dd74f0b5a9778cf31ff.exe 40 PID 1472 wrote to memory of 1360 1472 007556d5a71f6dd74f0b5a9778cf31ff.exe 41 PID 1472 wrote to memory of 1360 1472 007556d5a71f6dd74f0b5a9778cf31ff.exe 41 PID 1472 wrote to memory of 1360 1472 007556d5a71f6dd74f0b5a9778cf31ff.exe 41 PID 1472 wrote to memory of 1360 1472 007556d5a71f6dd74f0b5a9778cf31ff.exe 41 PID 1472 wrote to memory of 1360 1472 007556d5a71f6dd74f0b5a9778cf31ff.exe 41 PID 1472 wrote to memory of 1784 1472 007556d5a71f6dd74f0b5a9778cf31ff.exe 42 PID 1472 wrote to memory of 1784 1472 007556d5a71f6dd74f0b5a9778cf31ff.exe 42 PID 1472 wrote to memory of 1784 1472 007556d5a71f6dd74f0b5a9778cf31ff.exe 42 PID 1472 wrote to memory of 1784 1472 007556d5a71f6dd74f0b5a9778cf31ff.exe 42 PID 1784 wrote to memory of 1668 1784 007556d5a71f6dd74f0b5a9778cf31ff.exe 43
Processes
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"1⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:1720 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"2⤵PID:1736
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"2⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:1276 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"3⤵PID:1692
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"3⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:992 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"4⤵PID:468
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"4⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:692 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"5⤵PID:1500
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"5⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:2036 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"6⤵PID:268
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"6⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:364 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"7⤵PID:1328
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"7⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:1472 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"8⤵PID:1360
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"8⤵
- Suspicious behavior: MapViewOfSection
- Suspicious use of WriteProcessMemory
PID:1784 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"9⤵PID:1668
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"9⤵
- Suspicious behavior: MapViewOfSection
PID:1860 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"10⤵PID:1864
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"10⤵
- Suspicious behavior: MapViewOfSection
PID:1684 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"11⤵PID:1136
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"11⤵
- Suspicious behavior: MapViewOfSection
PID:904 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"12⤵PID:924
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"12⤵
- Suspicious behavior: MapViewOfSection
PID:1292 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"13⤵PID:1220
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"13⤵
- Suspicious behavior: MapViewOfSection
PID:1612 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"14⤵PID:1792
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"14⤵
- Suspicious behavior: MapViewOfSection
PID:1696 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"15⤵PID:1972
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"15⤵
- Suspicious behavior: MapViewOfSection
PID:1172 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"16⤵PID:1744
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"16⤵
- Suspicious behavior: MapViewOfSection
PID:956 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"17⤵PID:1648
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"17⤵
- Suspicious behavior: MapViewOfSection
PID:1976 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"18⤵PID:1700
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"18⤵
- Suspicious behavior: MapViewOfSection
PID:1788 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"19⤵PID:1072
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"19⤵
- Suspicious behavior: MapViewOfSection
PID:1768 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"20⤵PID:2016
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"20⤵
- Suspicious behavior: MapViewOfSection
PID:2012 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"21⤵PID:1632
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"21⤵
- Suspicious behavior: MapViewOfSection
PID:340 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"22⤵PID:952
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"22⤵
- Suspicious behavior: MapViewOfSection
PID:1948 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"23⤵PID:1720
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"23⤵
- Suspicious behavior: MapViewOfSection
PID:912 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"24⤵PID:1276
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"24⤵
- Suspicious behavior: MapViewOfSection
PID:680 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"25⤵PID:1640
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"25⤵
- Suspicious behavior: MapViewOfSection
PID:568 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"26⤵PID:1176
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"26⤵
- Suspicious behavior: MapViewOfSection
PID:764 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"27⤵PID:2036
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"27⤵
- Suspicious behavior: MapViewOfSection
PID:2032 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"28⤵PID:364
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"28⤵
- Suspicious behavior: MapViewOfSection
PID:1588 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"29⤵PID:1716
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"29⤵
- Suspicious behavior: MapViewOfSection
PID:1312 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"30⤵PID:1808
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"30⤵
- Suspicious behavior: MapViewOfSection
PID:1580 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"31⤵PID:1348
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"31⤵
- Suspicious behavior: MapViewOfSection
PID:1544 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"32⤵PID:1860
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"32⤵
- Suspicious behavior: MapViewOfSection
PID:1540 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"33⤵PID:1684
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"33⤵
- Suspicious behavior: MapViewOfSection
PID:1412 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"34⤵PID:1308
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"34⤵
- Suspicious behavior: MapViewOfSection
PID:868 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"35⤵PID:828
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"35⤵
- Suspicious behavior: MapViewOfSection
PID:1224 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"36⤵PID:1612
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"36⤵
- Suspicious behavior: MapViewOfSection
PID:1320 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"37⤵PID:1696
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"37⤵
- Suspicious behavior: MapViewOfSection
PID:1584 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"38⤵PID:1740
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"38⤵
- Suspicious behavior: MapViewOfSection
PID:1804 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"39⤵PID:428
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"39⤵
- Suspicious behavior: MapViewOfSection
PID:1700 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"40⤵PID:1960
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"40⤵
- Suspicious behavior: MapViewOfSection
PID:1072 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"41⤵PID:1788
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"41⤵
- Suspicious behavior: MapViewOfSection
PID:1968 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"42⤵PID:2024
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"42⤵
- Suspicious behavior: MapViewOfSection
PID:1632 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"43⤵PID:1524
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"43⤵
- Suspicious behavior: MapViewOfSection
PID:1964 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"44⤵PID:1992
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"44⤵
- Suspicious behavior: MapViewOfSection
PID:1720 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"45⤵PID:948
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"45⤵
- Suspicious behavior: MapViewOfSection
PID:768 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"46⤵PID:520
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"46⤵
- Suspicious behavior: MapViewOfSection
PID:512 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"47⤵PID:668
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"47⤵
- Suspicious behavior: MapViewOfSection
PID:560 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"48⤵PID:588
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"48⤵
- Suspicious behavior: MapViewOfSection
PID:2036 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"49⤵PID:936
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"49⤵
- Suspicious behavior: MapViewOfSection
PID:364 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"50⤵PID:2032
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"50⤵
- Suspicious behavior: MapViewOfSection
PID:1688 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"51⤵PID:1360
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"51⤵
- Suspicious behavior: MapViewOfSection
PID:928 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"52⤵PID:1312
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"52⤵
- Suspicious behavior: MapViewOfSection
PID:1404 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"53⤵PID:1580
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"53⤵
- Suspicious behavior: MapViewOfSection
PID:1132 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"54⤵PID:1544
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"54⤵
- Suspicious behavior: MapViewOfSection
PID:1016 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"55⤵PID:824
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"55⤵
- Suspicious behavior: MapViewOfSection
PID:848 -
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"56⤵PID:1412
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"56⤵PID:1476
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"57⤵PID:1044
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"57⤵PID:2044
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"58⤵PID:1224
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"58⤵PID:1872
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"59⤵PID:1320
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"59⤵PID:968
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"60⤵PID:956
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"60⤵PID:2040
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"61⤵PID:1804
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"61⤵PID:1356
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"62⤵PID:1700
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"62⤵PID:1916
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"63⤵PID:1072
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"63⤵PID:1536
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"64⤵PID:2012
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"64⤵PID:1952
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"65⤵PID:1632
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"65⤵PID:1352
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"66⤵PID:1964
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"66⤵PID:872
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"67⤵PID:1720
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"67⤵PID:1692
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"68⤵PID:680
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"68⤵PID:1548
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"69⤵PID:1176
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"69⤵PID:468
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"70⤵PID:1920
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"70⤵PID:268
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"71⤵PID:1520
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"71⤵PID:936
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"72⤵PID:1328
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"72⤵PID:2032
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"73⤵PID:1588
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"73⤵PID:1472
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"74⤵PID:776
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"74⤵PID:1304
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"75⤵PID:928
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"75⤵PID:1532
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"76⤵PID:1348
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"76⤵PID:1000
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"77⤵PID:1544
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"77⤵PID:1132
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"78⤵PID:904
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"78⤵PID:1104
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"79⤵PID:924
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"79⤵PID:1412
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"80⤵PID:868
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"80⤵PID:1680
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"81⤵PID:1316
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"81⤵PID:1476
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"82⤵PID:1764
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"82⤵PID:1612
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"83⤵PID:1320
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"83⤵PID:1872
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"84⤵PID:304
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"84⤵PID:1624
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"85⤵PID:1648
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"85⤵PID:1804
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"86⤵PID:1676
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"86⤵PID:1980
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"87⤵PID:1960
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"87⤵PID:1944
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"88⤵PID:1916
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"88⤵PID:1644
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"89⤵PID:340
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"89⤵PID:2024
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"90⤵PID:916
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"90⤵PID:1736
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"91⤵PID:952
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"91⤵PID:1948
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"92⤵PID:1352
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"92⤵PID:912
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"93⤵PID:872
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"93⤵PID:520
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"94⤵PID:1692
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"94⤵PID:668
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"95⤵PID:1500
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"95⤵PID:588
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"96⤵PID:468
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"96⤵PID:1760
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"97⤵PID:2036
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"97⤵PID:1776
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"98⤵PID:1328
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"98⤵PID:700
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"99⤵PID:2032
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"99⤵PID:1140
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"100⤵PID:1472
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"100⤵PID:1268
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"101⤵PID:1304
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"101⤵PID:1404
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"102⤵PID:1532
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"102⤵PID:1860
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"103⤵PID:1000
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"103⤵PID:824
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"104⤵PID:1684
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"104⤵PID:1292
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"105⤵PID:1104
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"105⤵PID:1400
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"106⤵PID:1820
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"106⤵PID:1316
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"107⤵PID:1224
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"107⤵PID:1764
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"108⤵PID:1172
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"108⤵PID:1320
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"109⤵PID:1612
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"109⤵PID:956
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"110⤵PID:1872
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"110⤵PID:632
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"111⤵PID:1976
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"111⤵PID:1732
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"112⤵PID:428
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"112⤵PID:1768
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"113⤵PID:1980
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"113⤵PID:1788
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"114⤵PID:1056
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"114⤵PID:2012
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"115⤵PID:1644
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"115⤵PID:1632
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"116⤵PID:2024
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"116⤵PID:876
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"117⤵PID:1736
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"117⤵PID:1324
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"118⤵PID:948
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"118⤵PID:872
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"119⤵PID:992
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"119⤵PID:1692
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"120⤵PID:1548
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"120⤵PID:1500
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"121⤵PID:512
-
-
C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"121⤵PID:468
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"C:\Users\Admin\AppData\Local\Temp\007556d5a71f6dd74f0b5a9778cf31ff.exe"122⤵PID:588
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-