a8fbde8b29829d92550f490051c961ffada5df53746e3da94cf192db749a26c1

Analysis

max time kernel
268s
max time network
231s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
01/04/2023, 14:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9CADECA6-E50D-4904-AEC8-57C4030FA8A6.mov
Size

4.3MB
MD5

4265a75ed0df6c5675761d1e1d2a5e26
SHA1

345bab81cfe571f9505c52ca001dc015c66b09bd
SHA256

a8fbde8b29829d92550f490051c961ffada5df53746e3da94cf192db749a26c1
SHA512

16935c1009c517613c3f0614604da4a2c3c5381b117b4a0c832516a52764c39e34e56028441e29d63acfec38867eecda8ae7b727b6a6521db3169acbe3774d9e
SSDEEP

98304:Rb7B7G9z/13n4IAnCSQ7qzpqMYubSdMWoEkM8+VEnfii8oiVIHQx:Rb75G5/13NI1R1qddM66+VEnfiHXVvx

Score

7^/10

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\Control Panel\International\Geo\Nation	cmd.exe

Enumerates connected drives 3 TTPs 24 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\I:	unregmp2.exe
File opened (read-only)	\??\N:	unregmp2.exe
File opened (read-only)	\??\P:	unregmp2.exe
File opened (read-only)	\??\Q:	unregmp2.exe
File opened (read-only)	\??\S:	unregmp2.exe
File opened (read-only)	\??\U:	unregmp2.exe
File opened (read-only)	\??\E:	unregmp2.exe
File opened (read-only)	\??\G:	unregmp2.exe
File opened (read-only)	\??\Y:	unregmp2.exe
File opened (read-only)	\??\Z:	unregmp2.exe
File opened (read-only)	\??\W:	unregmp2.exe
File opened (read-only)	\??\X:	unregmp2.exe
File opened (read-only)	\??\H:	unregmp2.exe
File opened (read-only)	\??\M:	unregmp2.exe
File opened (read-only)	\??\O:	unregmp2.exe
File opened (read-only)	\??\R:	unregmp2.exe
File opened (read-only)	\??\T:	unregmp2.exe
File opened (read-only)	\??\B:	unregmp2.exe
File opened (read-only)	\??\J:	unregmp2.exe
File opened (read-only)	\??\K:	unregmp2.exe
File opened (read-only)	\??\L:	unregmp2.exe
File opened (read-only)	\??\V:	unregmp2.exe
File opened (read-only)	\??\A:	unregmp2.exe
File opened (read-only)	\??\F:	unregmp2.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs

Web Service
T1102
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Kills process with taskkill 1 IoCs

evasion

pid	Process
7004	taskkill.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133248416765339430"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000_Classes\Local Settings	cmd.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4636	chrome.exe
4636	chrome.exe
2728	chrome.exe
2728	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3044	unregmp2.exe
Token: SeCreatePagefilePrivilege	3044	unregmp2.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe
Token: SeShutdownPrivilege	4636	chrome.exe
Token: SeCreatePagefilePrivilege	4636	chrome.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe
4636	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3532 wrote to memory of 5092	3532	wmplayer.exe	84
PID 3532 wrote to memory of 5092	3532	wmplayer.exe	84
PID 3532 wrote to memory of 5092	3532	wmplayer.exe	84
PID 3532 wrote to memory of 1852	3532	wmplayer.exe	85
PID 3532 wrote to memory of 1852	3532	wmplayer.exe	85
PID 3532 wrote to memory of 1852	3532	wmplayer.exe	85
PID 1852 wrote to memory of 3044	1852	unregmp2.exe	86
PID 1852 wrote to memory of 3044	1852	unregmp2.exe	86
PID 4636 wrote to memory of 4352	4636	chrome.exe	89
PID 4636 wrote to memory of 4352	4636	chrome.exe	89
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3672	4636	chrome.exe	90
PID 4636 wrote to memory of 3360	4636	chrome.exe	91
PID 4636 wrote to memory of 3360	4636	chrome.exe	91
PID 4636 wrote to memory of 1704	4636	chrome.exe	92
PID 4636 wrote to memory of 1704	4636	chrome.exe	92
PID 4636 wrote to memory of 1704	4636	chrome.exe	92
PID 4636 wrote to memory of 1704	4636	chrome.exe	92
PID 4636 wrote to memory of 1704	4636	chrome.exe	92
PID 4636 wrote to memory of 1704	4636	chrome.exe	92
PID 4636 wrote to memory of 1704	4636	chrome.exe	92
PID 4636 wrote to memory of 1704	4636	chrome.exe	92
PID 4636 wrote to memory of 1704	4636	chrome.exe	92
PID 4636 wrote to memory of 1704	4636	chrome.exe	92
PID 4636 wrote to memory of 1704	4636	chrome.exe	92
PID 4636 wrote to memory of 1704	4636	chrome.exe	92
PID 4636 wrote to memory of 1704	4636	chrome.exe	92
PID 4636 wrote to memory of 1704	4636	chrome.exe	92

C:\Program Files (x86)\Windows Media Player\wmplayer.exe
"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "C:\Users\Admin\AppData\Local\Temp\9CADECA6-E50D-4904-AEC8-57C4030FA8A6.mov"
1⤵
- Suspicious use of WriteProcessMemory
PID:3532
- C:\Program Files (x86)\Windows Media Player\setup_wm.exe
  "C:\Program Files (x86)\Windows Media Player\setup_wm.exe" /RunOnce:"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "C:\Users\Admin\AppData\Local\Temp\9CADECA6-E50D-4904-AEC8-57C4030FA8A6.mov"
  2⤵
  PID:5092
- C:\Windows\SysWOW64\unregmp2.exe
  "C:\Windows\System32\unregmp2.exe" /AsyncFirstLogon
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1852
- - C:\Windows\system32\unregmp2.exe
    "C:\Windows\SysNative\unregmp2.exe" /AsyncFirstLogon /REENTRANT
    3⤵
    - Enumerates connected drives
    - Suspicious use of AdjustPrivilegeToken
    PID:3044

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd83fe9758,0x7ffd83fe9768,0x7ffd83fe9778
  2⤵
  PID:4352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1808 --field-trial-handle=1812,i,3974370854343246895,2194109290756997600,131072 /prefetch:2
  2⤵
  PID:3672
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1812,i,3974370854343246895,2194109290756997600,131072 /prefetch:8
  2⤵
  PID:3360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1416 --field-trial-handle=1812,i,3974370854343246895,2194109290756997600,131072 /prefetch:8
  2⤵
  PID:1704
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3180 --field-trial-handle=1812,i,3974370854343246895,2194109290756997600,131072 /prefetch:1
  2⤵
  PID:3384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3308 --field-trial-handle=1812,i,3974370854343246895,2194109290756997600,131072 /prefetch:1
  2⤵
  PID:3900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4560 --field-trial-handle=1812,i,3974370854343246895,2194109290756997600,131072 /prefetch:1
  2⤵
  PID:1708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4640 --field-trial-handle=1812,i,3974370854343246895,2194109290756997600,131072 /prefetch:8
  2⤵
  PID:3156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4800 --field-trial-handle=1812,i,3974370854343246895,2194109290756997600,131072 /prefetch:8
  2⤵
  PID:1916
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4684 --field-trial-handle=1812,i,3974370854343246895,2194109290756997600,131072 /prefetch:8
  2⤵
  PID:2096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5052 --field-trial-handle=1812,i,3974370854343246895,2194109290756997600,131072 /prefetch:8
  2⤵
  PID:1800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5056 --field-trial-handle=1812,i,3974370854343246895,2194109290756997600,131072 /prefetch:8
  2⤵
  PID:4864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=5092 --field-trial-handle=1812,i,3974370854343246895,2194109290756997600,131072 /prefetch:1
  2⤵
  PID:3868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=3292 --field-trial-handle=1812,i,3974370854343246895,2194109290756997600,131072 /prefetch:1
  2⤵
  PID:2376
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5100 --field-trial-handle=1812,i,3974370854343246895,2194109290756997600,131072 /prefetch:8
  2⤵
  PID:4364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5004 --field-trial-handle=1812,i,3974370854343246895,2194109290756997600,131072 /prefetch:8
  2⤵
  PID:4968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3248 --field-trial-handle=1812,i,3974370854343246895,2194109290756997600,131072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2728

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1548

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1700

C:\Windows\System32\NOTEPAD.EXE
"C:\Windows\System32\NOTEPAD.EXE" C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.bat
1⤵
PID:3896

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.bat" "
1⤵
- Checks computer location settings
- Modifies registry class
PID:2224
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4764
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4680
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1800
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4408
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2876
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3428
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2372
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2328
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3600
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4032
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1952
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2776
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4952
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3412
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4224
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4856
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3432
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5196
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5280
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5360
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5416
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5448
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5512
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5544
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5600
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5636
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5680
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5720
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5752
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5784
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5852
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5868
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5896
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5928
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5988
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6076
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6060
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6532
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6644
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6768
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6884
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6984
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7044
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7032
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7112
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7148
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:864
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3352
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5700
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4780
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6764
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5168
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4000
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2776
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5136
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5416
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5040
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2004
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5944
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6660
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6444
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5572
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5356
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1048
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5060
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:444
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4076
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6024
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5884
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7076
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6120
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5348
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5228
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6208
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5856
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5136
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6580
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5816
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5892
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6052
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5068
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5960
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5112
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2472
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6824
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6156
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5452
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6024
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4876
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6328
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6236
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5420
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6304
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3888
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4796
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7112
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1736
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3364
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4808
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6724
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1452
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2100
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4244
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3540
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6780
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4056
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3100
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6644
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:400
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3440
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6800
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4880
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6860
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5448
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1396
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2136
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2324
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6936
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7160
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5728
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5376
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6060
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3960
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6660
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3896
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5668
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5428
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7068
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7140
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3812
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6300
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4784
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3400
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5656
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4904
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1788
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:544
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3352
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6040
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5284
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3376
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1304
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5048
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1376
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6364
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6560
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7096
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5308
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6228
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5576
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4112
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1308
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3192
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5496
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4908
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4968
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6532
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3444
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4852
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6444
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5328
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4632
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6600
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5196
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5716
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5756
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5872
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5420
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2320
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4644
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5352
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2952
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3272
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:504
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5492
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7088
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5784
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6772
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6232
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6756
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6936
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6032
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5300
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6348
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4200
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3384
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6532
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6316
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4720
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3592
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4748
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6304
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3116
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5616
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5060
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2268
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:992
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6456
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5612
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1096
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5356
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5692
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5900
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7036
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5112
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6464
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6448
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5924
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6816
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3152
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6328
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1468
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4640
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5716
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2420
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5784
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6740
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3256
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6012
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6088
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4900
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6368
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3252
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5492
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6728
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5488
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6208
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4740
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5156
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6824
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5668
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5388
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2768
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6540
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6484
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6420
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7092
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5700
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7148
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5604
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6228
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6648
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5152
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2260
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4244
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7112
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1996
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5708
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5188
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5816
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6580
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3600
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6604
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6212
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1344
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4256
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6012
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5404
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5500
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5964
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5812
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5232
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6236
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5756
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5044
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3404
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:544
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6092
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2268
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2256
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5684
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5552
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1960
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5972
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1800
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6484
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3032
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3376
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5748
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6624
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6940
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1832
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6768
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2824
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7032
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7124
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4004
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6648
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4424
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4244
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:876
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3188
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5256
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7056
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1396
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4152
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6856
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1344
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6124
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6176
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5964
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3184
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4720
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6140
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6072
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3700
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3988
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5248
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5044
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2136
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5308
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3080
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:220
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4124
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6044
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6944
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4264
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4324
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6472
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4444
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3272
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5684
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5184
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5376
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6028
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6612
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4240
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6688
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3092
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6544
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6212
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1792
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2704
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6392
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7104
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4640
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6100
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4832
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3784
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5956
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3608
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3864
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4932
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5988
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5548
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6828
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6884
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2868
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7052
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5700
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6824
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5472
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4956
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:8
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1452
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6552
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4332
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6744
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4304
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2876
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4780
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3468
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5836
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5432
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6680
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4600
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5776
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5696
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6948
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6292
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2988
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5352
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4756
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4596
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2072
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6544
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6468
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4768
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6656
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4928
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3496
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4848
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5528
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6132
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5680
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5996
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6004
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5544
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4364
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5956
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6280
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6444
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2868
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3000
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4648
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6780
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6436
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6244
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5568
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1844
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5316
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6228
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6632
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1232
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4408
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3296
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1832
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3104
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1392
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5028
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6336
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5928
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1352
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3340
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6268
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5376
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2288
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2296
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5160
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5796
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7104
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:392
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6064
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7004
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3240
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6424
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6076
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3252
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:7160
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:2080
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:800
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4472
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5988
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4748
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4660
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6264
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5496
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3432
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6824
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6932
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5248
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6956
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:4944
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:5228
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6420
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:3272
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:1784
- C:\Windows\System32\WScript.exe
  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
  2⤵
  PID:6572

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4e4 0x4a4
1⤵
PID:5032

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Virus4\Virus4.vbs"
1⤵
PID:6032

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\Virus-for-win-10-main\Virus-for-win-10-main\Ransomware\RansomwareV1.bat" "
1⤵
PID:7040
- C:\Windows\system32\msg.exe
  msg * WRITE TO [email] TO GET THE PASSWORD !.
  2⤵
  PID:6532
- C:\Windows\system32\msg.exe
  msg * IF YOU CLOSE THE WINDOW! YOU WILL NOT BE ABLE TO RECOVER YOUR COMPUTER !.
  2⤵
  PID:7052
- C:\Windows\system32\msg.exe
  msg * BE CAREFUL! DO NOT CLOSE THE UPPER WINDOW.
  2⤵
  PID:4740
- C:\Windows\system32\msg.exe
  msg * REBOOTING WILL DELETE THE DATA ON THE HARD DRIVE !.
  2⤵
  PID:2516
- C:\Windows\system32\msg.exe
  msg * DO NOT RESTART THE COMPUTER !.
  2⤵
  PID:6788
- C:\Windows\system32\msg.exe
  msg * READ CAREFULLY !.
  2⤵
  PID:6736
- C:\Windows\system32\taskkill.exe
  taskkill /f /im explorer.exe
  2⤵
  - Kills process with taskkill
  PID:7004

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Web Service

T1102

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009

Filesize
295KB

MD5
898353be1de21d0d04dd65c111de95a9

SHA1
56e343553a5f63da046e8f3c25593cf60f047032

SHA256
a48eb628cd94d73e6cd7a2edde9bb993a98e46c41216f046428f59a56556aa0b

SHA512
0bf2dc8ddd40a9c4fb5b43ac3ee9fff5b372453e8bb2851e4ac28ee081c461ed2680cbf12817ae6593f6ccb519138fc9a510016468bed21e9afcfcbbd354099c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b

Filesize
64KB

MD5
c4f7300442a8f13dddf5c9bd09128727

SHA1
d7c8a30cdfe9027cca42c45f44d569627112ae6c

SHA256
5decc8ac1f3d26152842e44d1aa103c913711168c968c936bb782fb3cac10155

SHA512
3b6ebaff36af22dcc9ae7a7593657b56f99afb242ebeed50d26a33e1e6b0ff31c98ef576b96cf98c277cafc1050fee40b5d4c3fcd730595be756089a980030cf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d

Filesize
37KB

MD5
47ae9b25af86702d77c7895ac6f6b57c

SHA1
f56f78729b99247a975620a1103cac3ee9f313a5

SHA256
9bde79a1b0866f68d6baa43f920e971b5feb35a8e0af7ffadc114366f8538224

SHA512
72b5296e3dd1c5b4c42d8c3e4a56693819779167b9f02bc2d5f5a626b519a9cf10bee59846d614c929c42094b65d13039f6024f6cb1c023e740969aaefd060c4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e

Filesize
68KB

MD5
75d646446e92f953c075982d56a16c40

SHA1
f58c07c5a85ab9fc5f3966de5716099e0eca42c3

SHA256
b849818336676895ae90e416108f8e218db4388fc57adfb45f3af58d202d58c6

SHA512
4af2259eae1660d90b3543a6c86fd8bd2dff0b81dadedcaa3d74b7efe2cc2c4f5e7238416d8cb518247cec9cb53537eae169c1c328d1f59193bfa3e41129bb51

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014

Filesize
199KB

MD5
d683e944caeacb0b7a678c79c7c54f27

SHA1
662e2b2d853c4c35a375844f4f4737ed68a94cdb

SHA256
a8038d7ec7fe62db605823bc035d8296e89c55c6347311214379b3a1ac4ff828

SHA512
9092768fd83720901c2bd5b3ee7aee7358af8cf89d8edcf8507619536ff30f11129f6103d8627faa4e6850cdf23df6496ff3c00ba83998e1b05a48da2db45362

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000024

Filesize
16KB

MD5
01f39654bfbda3091c8938db7b6b393f

SHA1
79c65fb4185ead09933917376aeee926b0b8cab8

SHA256
42657d7ab62db65bf5b313f9964b8b6b66d251b10447ab14e4cb782b73d2a60c

SHA512
685dbdff1a404e0f3b25a9a6f6fc72c3d85e321eca1f63267c64413574201358d578e229363b91a20f1759eec614824310a4f3fa8f12f235187cf1e1562de60a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
f7d676fee44fadfeb55d88d0471c54d1

SHA1
725b326475b774554e2635be95f8ae64e9abc9ef

SHA256
91ee6b7a33494982747e761ea95324feaa0efdcb0e49e3acc5dbb4c8eebeab87

SHA512
3b7271d7db4e75fa5d869af65bba781bcfcd72a8324df0d368ac7daba16c0698c83808086e24b6e2bcddf0766c0156fc65d3fda33f12c2b2ea53ccd39ed0609e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
f6c0ada59b25d2465e34598f82b2b55e

SHA1
7aaa00faf7bfa2aa5c6bc82fc20d73ec6f6df78b

SHA256
d129b834ad101de090daed64714a639cad70451915b7772628d93ac8e0ed1225

SHA512
74b07a19c9d176334887cc55e444a669d24b2face6a15d1f44a200f3d6e4caf13a66b7af2d3a69fdb07f2f03098be8a3b1ef04f3eb7d41499bcadc8deb7b0d1c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1

Filesize
264KB

MD5
6337616440a86fdb859d1f000b5a6d86

SHA1
7bc07094d8526521879dc50a59b40f1f0957d57a

SHA256
d741bc8a24ccbad5b8c9302480dc2047de41e0d576cf3c92a7faf40ced435444

SHA512
5d29c19613bef79dfa8235d00f5e3558d4e1b725ae360ad49ac3a99e9b1b1b99aafa7f310965b19b2a7850dc6aa1c5a1081fe37bcee2fec65172819d46efeb08

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
3e5ba2bc53264b3f306ef131a41e150f

SHA1
d4b123eae967b126ad36b78f8e1ced4ba916a520

SHA256
b607026d4852434884f954536c138f3fc29cb997cdee5df3e0b0d8d94ea994b4

SHA512
7c39b8237c4e7b57c6bd99d794c7c943300a304dbc36510cad442d2a08d063c5fda97db314aca35dcdf1002dc1b03d063b675f0042aad600118a01ed103ae324

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
38409b0daae6219b219d53bfb30cbc6d

SHA1
90c2dd3c19dbc375b6d226871c82f225b41851f7

SHA256
ecdf41932838a8188c9f68bf5a2227b72a166e8810e2f6e4941f022bc9cb564e

SHA512
1b138d69b547248d426d066c7a597fd720da7f18a965b7585b816f61139c84486fcd1e1b86f4fd1b9c7362ffca5093c74d77b752f28be2f79ee714cfa08a14e6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
3dfd223259ab25010970ad5a92aeb9ed

SHA1
41f7d43b7eb959ea4a9849f5c8c7f12966b1f9ec

SHA256
83781c4afe01027bb5f51811e9c13f763421e04ae551c0168fe16b99505d91d7

SHA512
ff3300527cfeaf046d725fa457fce81344445fa1813e6878930a59697e5b79633e0d726bf8861f1c41d7f32d7fc5db90312c1201627655229fa666e22edc172b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
0d6b41ee13f4fc95cc541eaedfe5ea8b

SHA1
d8688e71455b60f30c421739bfd93c8427ab9e91

SHA256
354c17a471323947b306ba2bc73824dffee7075497c77eec1c1e8c522fff43e0

SHA512
240a7e381b216c91d772e3d05b86d6b917e27720cca7bf2f17796a3f5159f5c695dc920d4237d195d37ee7270b6f8f799d716a61cae6deca9884f0aa7e03ab74

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
367B

MD5
2492c90c760072efb0bc9673db9d0510

SHA1
1ceb53ca916407d6990461b97b1e821f705b90ec

SHA256
1265b5849da6971d1d4611c487c71408d9eea2a21a19ed03802f0341e324b38d

SHA512
553cc5103edecf24393794a3d46e0846d20a1ea1f7bf63421802d002bcde316743bcf7a3f4472f41d330e6cd9d3d13ee87a180ad35209a05a1eb47448916b7fc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
371B

MD5
05152c73a65bb6259bd9590a34dee229

SHA1
fb6a9162518865e75d2a3c9d3e7521b6491af3a6

SHA256
eff1afc223565ed9489054575b0dbe66cb1c8dd168f2c5b5e9703c2f3c8acbb4

SHA512
262f41f7cbc67c676774b102cdc5f0dc1dc2002bd91b64774c16ad505495be9029ac7a2ea9864b54baa962d2c24585fa36efa3820dd1506f44f31fd6a1640037

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
367B

MD5
425ad0c0186472ad5e4ec8fa45e4e6e5

SHA1
d2df95fe141d2dab56127e267747aff8b6ab13ce

SHA256
bbacb55b1cf0f74339a88d656d9f34a97a3dc827d91e41bfe8d118f30df2a7b2

SHA512
4333a08551fde39a475591717c94aab24ef72735648fe29a5314c87f182464b59a77adc62f76a8b53dc37b62aa1ac06136732721749e997427e50b99c41a84cb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
271becd201cea72561ece8fc04d3e46a

SHA1
ae9a637522ceed36fedd88eefd0c49a0e493eef5

SHA256
c42e334cdbd99c5eac32d16ee28bc095e18a87caeba90075d7d0394cb5442dbd

SHA512
10c89dc5155b3ccbcaa9af4947eabf7c09f8f1ff3b019bf7076e4f3cf5bd9a5c8b791f0b75f1d0542e07257f84e76800096f041ca0cfe4ebc5ee888ab3098bb9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
367B

MD5
afae975036b95c06f0bc608a7b9a0856

SHA1
df12b8afcfb58a2fe0e51310054df64569f23398

SHA256
5c8af2bf1a0980b8c082e41bfec1fb53f7b90794ec6bd1ea045a0ba965e49c66

SHA512
71560e7a83ca5c6cdf9b79826a401dbad5637608c0427c2c9d2e5c7c7b8d8273285e58eca9d52911c710d2c83f50d43f4a3663f6481a8c8a72c5202dd0cdf1bc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
371B

MD5
0ee2dab9aabe00d044dcd3434dda35ca

SHA1
cc509cf898bced2183b7824d8c5d655b75bc17a6

SHA256
93908d0032643020f76f76af916e93203056b21f514bca7407a31cd7723c5d13

SHA512
00137af46eab0e780a0726f79d0e456402602c43059c218eb771e41fdfe6ce60c2a6c9afc3840abada46e1d9a4b888733e47c4f2b1d848f1602b4ff20a8f6028

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
6ba60bedf4759f0f2a84491be36afcde

SHA1
8094ebb7bd49a497314771f5e56323a2409f1296

SHA256
7bd61faee74985307012f9eafd6c68af99ff29efffa8ec6a07fb163368bb4846

SHA512
703ebc29f5bd6834b0793de47cb1a5287118ee960640e0f27d5d03b3e87af02d5690984f508616fa333c5356770f5a9e63d3de5a5af021cf2363f39ee1d426e3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
777c1a4884c63a3440a47b36863105c0

SHA1
b1ba46bd0f903ea4b7f7850db2b721c261f34876

SHA256
7b43dd94514a1a8740e2a362c64cf371dc785124e215633ed3d5690864ff2a7a

SHA512
3273e73d99fab480a511341a7916cb8c81fd86aca9e79d68b3d9d72ddfc76e6129df1f45b2b7e665229aa162de85298480d08f21b8d0e79cdcd24a3f8859cd1a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
371B

MD5
440ac0ff60b354059143836d47d227d1

SHA1
81442de5f6c63110039f679fbdd6367564805989

SHA256
29e4cede0d1adb2959cb737e2b5d78ad8c7233ce006d01291572842352b02587

SHA512
11904999639600773b932f10e24b8cfe16a49b2304a958265997ebda79e4f991fa1d89ce9911af1b1a231f97854ebc3c5c0caee79c4a3864e28c47f8c4a8e79d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
19d0d065a1b99af38853dae9ead30b66

SHA1
a1fc95e86a7b315cb5ba74972455c651043bdaa0

SHA256
5941f40797c00a67d237ba993ce2aa3e544fddf5ff3ad11ce0e97aa1eca603c8

SHA512
7a0b4f40398391f07d9246d30a5f05635469149c119100245f540709d1ab57c0837e0d8d0947542593f35ce1bca47670f1391d8799871b3f01cd9becbc21e958

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
a982135ccb968ddcb435d0724b134fa9

SHA1
8c973cb505b1f2f97a3a445901e0ab52962e96dd

SHA256
d1051f9e339c4d10b52850b1cfeb5d5ea1b3ac05a815d61db93f744ed17be182

SHA512
8ee13b2284926606b6228e122052fc9234bfd61be1873b2625cb8655b088697745062d36566b28c5c6c801b18bbb55787a91afb03bba0e4ec391bc3425addda8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
87230da5967cdcb911a613281138b5e8

SHA1
ccd2a0aba81627943ddbdf4fe2016af30fb7813d

SHA256
919fa2749e0c0cd24d6a22ea3f2c7158f7fe855d770665ef5d52c4768afb7ca0

SHA512
c7800184626e3acd06c4ea69d8be7f375a82f6a9740fa6778c0f8873c6ad848cd80d885d3a933bc0c794851f26046338bdde6089dccea0c1312ae7c13827d6d3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
dd9f7880bd40ff753080da4840a2c546

SHA1
5ffe176e8cac081c82b317ff1d3825f29ed5d90a

SHA256
dfbb12137fd70f33dd34a00283f13bd0cb5fc4d8c23bcb4ca439238a30113c52

SHA512
9d49d23b2aa74d1b2f498949c55dbee023c70b22b5572bb9b0b44b9b9a74d1dbd7b8df21a0c332dc78ad8cfad8ddaa85594edad828cffcc54305388a308d450f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
ce10214639a417af05c5560d964d274f

SHA1
8d6cef81c0debad7f4e11f698c3b00097e2f4d5f

SHA256
d7a9cdef72e26df0ca4268c6e5c745ee999632607716afc2eceeda2541984db2

SHA512
0252c6e4fe445ae292cfa4e09a5c79ee4bb35e87b1580b85f2e599f66153d2f7c13d008ac953cfb1f3a643a0c94db904c2b4575d5fd2dd69bb5c0cb0e327b6b4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
22cdbbb25ffbe7a90a4ccf4eaff07feb

SHA1
bc3da027a07fe37d3ca40852a5f2585ead627c52

SHA256
87ea3852395666e367c01c75b04965081b905fcdd70a91ae3cb8c01f58e03095

SHA512
d766fd52e23e322bb9941c3049ad68739c993b1eecba28bdf8c0a0a413cba2134cbf5379ec027774e18b370e54d1b271499210edceb234f27cd3988be39b68b2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
e711f30f9c018bbb800ab368147992e4

SHA1
9ee69b48eb77abc21d0738e6c7b96adf20da8283

SHA256
a4962bcc017e0c4eb4d8ac35543d682bddb31776a382932ece760fce0c0968b8

SHA512
5f873db8e10aefef3da6a9e5a638b05a163ca52ededf28758c2ace52e50aae671d67650873653575ab777ec6876f67947e2d6eacc8c70857d6ed9374f78aad27

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
d87a8e56ba5935edb3c05d96c0176634

SHA1
b943c162ccc46d5aee7680996d720f375ddc3ea3

SHA256
a68d6a2f5702c24810a77bd96b07d1e1ef778422f685eecf30cb411b2f837455

SHA512
4864de9857968729a2e3d872b14f74f99fd4ae857d24cf6956c0a79b0bad7e7d70df676858330eb647079205f729dec227adef14596a33667b05fcc0da5a0adc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
f0f15cf3f6e28f41fbd69ab883e5da11

SHA1
df5c43b618ff3f6896e571c4f430c37847eed024

SHA256
6e8343fc1d2ed33d871adf19326a938947b90fb50ac4c75e90c8015df43cebf2

SHA512
7e82b2bc01ae83e4fec163c81fe0495d4fbfa079b1d44353e93c7b839b4387580a18ac27361b57dbfa97b32902a87f8323aa09335afc159c57ae2b7b7ea76fc3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
173KB

MD5
e3299022b82184af8a47bd2e9a601570

SHA1
aaa3632423f5f4d1ad08e1b83fc9f5692457ed4e

SHA256
294d20ffbf71fb2262d16febc6ee055403e167d892de8d12748e28556af2802e

SHA512
0d6914bc572dbddbd795b06d50eeff9a9e0356489b0a4d3b4084fe5025930a1ace74db52e9df09e18a80158f1a1661032706975197257e85bd2fd5812cf364f1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
173KB

MD5
b372849d7eb44dbb1c5875b4b9d652d7

SHA1
015a2717936c1097a5d2a8ab2b676163601fabbe

SHA256
fb492e4a4fe86663a1dd250dd3ca358b5eb3b4f47e8f7be9ee858a7bddc28460

SHA512
7bd5c29c8df2214239a2f8a9637ab90cac237606a70c7dc006282dc53c61919a82d1001579078d49cc928ff9d864cb01f146f21f9ed191c31e1c5330afea69de

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
105KB

MD5
76caaea154a47776dfb22d341ca12fd9

SHA1
060c64094a4833da204af843d71ef4ad396603ac

SHA256
c54e9f55158ae2e136711eef0d9f2d865899b77420f643a444ecfd9b70753ecb

SHA512
e3b4416b22361293a31e0eef8a6b5c439e3e69e5e5551547ec9ccfefb77c7ed7cdfd6b7f914c20f64e7a76c01d72b891c1e27225710432d17d50db314a1dc2a3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe5877cb.TMP

Filesize
96KB

MD5
c36f60d1567e0f0111f532a40bae498e

SHA1
00f18033676e2b5fe06e362fd6a94370992872a0

SHA256
e320a202ddd55a279aa1cb1b2414a3976aa8804f389d3c0f6b13c947dcb4b3fc

SHA512
6e676ac52434b6e51a4247acc90b8cd9e310402c0df4fa210f40793f9d1f890dd2f5750fe870127e47886d13f964160a835055762948466e2a89e4dd0808a733

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
268445ae7aeb1b7576d00c48ce472344

SHA1
3c349a799e8b757fb2ebf4237564025423daf506

SHA256
e873fef6d7a56a3d8f97db61d3ae8ff565c810df12f6254140c4cbdb576c1db6

SHA512
9ccc217127b12d9b89971234eef164ba23230c02e946dbdfa678bdfb078bc9c063132f5b0d4e025597311af1a8defef75c5529f323a114b15d7e75ca18bf12fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
268445ae7aeb1b7576d00c48ce472344

SHA1
3c349a799e8b757fb2ebf4237564025423daf506

SHA256
e873fef6d7a56a3d8f97db61d3ae8ff565c810df12f6254140c4cbdb576c1db6

SHA512
9ccc217127b12d9b89971234eef164ba23230c02e946dbdfa678bdfb078bc9c063132f5b0d4e025597311af1a8defef75c5529f323a114b15d7e75ca18bf12fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
268445ae7aeb1b7576d00c48ce472344

SHA1
3c349a799e8b757fb2ebf4237564025423daf506

SHA256
e873fef6d7a56a3d8f97db61d3ae8ff565c810df12f6254140c4cbdb576c1db6

SHA512
9ccc217127b12d9b89971234eef164ba23230c02e946dbdfa678bdfb078bc9c063132f5b0d4e025597311af1a8defef75c5529f323a114b15d7e75ca18bf12fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
1d478a8f9e6826becb6865b90511bca9

SHA1
53a112d38c21c4181ca1ff80b6a7d495f0982677

SHA256
38059cfb1228c641d3a9cca35c92061d1dca619eb7443d0a7f37512805ea7c96

SHA512
cf64a08275fbc92ff9bc47b378f104ceabed39de4af5f995b3a259a434f19b421c041045f3299b0ddb59d1284bc82dd13f1a4a82c2f74c40d11d18bbea4f49d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
707b72750ac9ba5f2fe4b4b3c002bd25

SHA1
9c162901303b51d4997b975a10a722322ee7d35a

SHA256
b15ba7b4de00441f1a6bc31bb478d4bd2fca18228caa0639e41a317e2067f42d

SHA512
fe9bc3d894224bd697a8d4ee8487980a26b413c4867b45727ae70b85886c9e1f36f6daec79ecbd8dfbd7898644ccc229c50ec96863e64bef4f24e91f46e5e603

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
669258b04407a3e00d0ae6cfd024d0b3

SHA1
b17a16f124300c2f97dbcc01aea92c506a6851e6

SHA256
bcb8818e8f47eefcfd930d60187ca7ad02c680bb1d41a45b8afd49a7ff1f86b9

SHA512
c8fc0cbbbe298dd83977879c729443c612e0272e0c984b21c085b11ab250529820892e936dcc282db505179fe166d03c3951e638bb672f1c1ead104611b76bc9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
256KB

MD5
41e020ee798eceb4ac90cba2142a7a1b

SHA1
714ffdf4ddc441ae72c3fb2e4548a8219ad06fb8

SHA256
60968b6f285adc7f7347c43815c17a27a383807366f91212b81b17cac20131a8

SHA512
29d22703589df058c7f3509ce58f8e2f8fdf1fc2077e0622a796e4f9c17e563994e3cce83d74b5d58d79ae5b335a1e114c86ca7fe149bab10c3656c0acb0ae76

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
c966f3470e8560687e8b80c329d95a7b

SHA1
613703bb37d2fac77d09c6426df6b97197c3ec8a

SHA256
8efb5a8c511abce3c4d67f4d0d0545fe4e2b79f74e57375cbf439619fe11cc51

SHA512
11a532414f99f76bcc7655a5646be1d72b5a2169ee255e5c216c1feaca5f750f37060b1e654f38c830dfbf3e48a55c86336f11b58ee9c538acae3564bacfcbc9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
9d5f3c67866b7d97a18892ca713af426

SHA1
4ff8b32bdde3b10d895106c6cbeb3c54eb6d73d0

SHA256
e2db2f87e576c556f08a43d3ad170a5cc41cbecf9d5c10258f09a2e6dedd7a88

SHA512
a5ce36039cd50191933a1691e5b9f4fa79a135a2259302869037ebcedc84df6d360aabfa1fca33fc67fe0b715d60b18a781e593b407a12010a4c46f6afdd44ac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
ca4b64a340f5aa3d572c4c1789f73102

SHA1
7aec58732f476dd0164bc859fa10322605787217

SHA256
99b2843a1cafae4e8c1713f4bcdc4f667a9cd85f0829246dbbf22b01c4ae007c

SHA512
a59a490b2792b4e755dacf575b4a7c781c3feb521d042fb62105dae776eed7adc025249756e2ea2d509ee3feb6b3610ce6ab7532a61a7b2d3fbf876adc1d111b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
ca4b64a340f5aa3d572c4c1789f73102

SHA1
7aec58732f476dd0164bc859fa10322605787217

SHA256
99b2843a1cafae4e8c1713f4bcdc4f667a9cd85f0829246dbbf22b01c4ae007c

SHA512
a59a490b2792b4e755dacf575b4a7c781c3feb521d042fb62105dae776eed7adc025249756e2ea2d509ee3feb6b3610ce6ab7532a61a7b2d3fbf876adc1d111b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
93a1cb7a09271a04ce7c891aec32d65b

SHA1
4b02b8b879540244cc2c432c3a7d9a915fdbb1d3

SHA256
f5ad0e3184fbca5ea552fa762bc57073944a0e156d6b29ed59305d73f769054a

SHA512
5dfe5e44299049073ab0472b4894ff3e231c93fc301cab4ad51010150f916f3d1bbe71b6725fc87905f87fb647f99d619b50ed4b092d35193d62fe27d0d757ec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
a148fc6b9d5dcdce4d71a74dd22fb753

SHA1
74e5a60af13a62494f9f161f84ed7e1f7c138262

SHA256
7d79d91c776c563c5fb3568af8ff44b786b2dab6944cc282ef2275f193632bfb

SHA512
920c77fe7ba8266711350c8c1ec5a612ae62d35d99c3f7f4c3b84553eba68663a17a34ab0cb98051dd8d64dde77dfd3157a6c7a8f25ad0343941863b65ffb78b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
8f70a830c87c2a3dc83b618437f59746

SHA1
52f1dfd5a69844486e8858aed44ed483d5d156be

SHA256
a970df4169a575210a146824d4cc3c64795d5626fcf4a2719c2ca19aada9c0a7

SHA512
ddec0ba6ad69fa583186280cda40775ab6c4c25953b5bb69416e8eb25382e58de5f898f3644f1f69253725a5c4272d8b0be031cda73552bfcaeeadba6999dd0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
8f70a830c87c2a3dc83b618437f59746

SHA1
52f1dfd5a69844486e8858aed44ed483d5d156be

SHA256
a970df4169a575210a146824d4cc3c64795d5626fcf4a2719c2ca19aada9c0a7

SHA512
ddec0ba6ad69fa583186280cda40775ab6c4c25953b5bb69416e8eb25382e58de5f898f3644f1f69253725a5c4272d8b0be031cda73552bfcaeeadba6999dd0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
ad1af82a0f69c1e829e4fe83b2746b88

SHA1
76c3939096092dbd392f2b2c29769131d526a55c

SHA256
d83da0dd1651c9abaf1ac3e2ea60d7b9d06c9736151588894a257f80d5729d0d

SHA512
fb181c5abfb648d9dbc3dae16008b937b937d8df25699e1c658fe94d8e01dd9927b537765be751a51d1b81bfac5228def87cf2f79bbad7081a485af7b15fbd62

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
004d28709cc8be9a0a71834260aaa115

SHA1
60b1a23e0b9fe06c200c90fba05664d15efe42b9

SHA256
80e8d52dd157a5b83b32bb6294d54f466c32cd5b41ac18afe05457545882f897

SHA512
07347e16771bfbb4b98aa64bc07690eb8ba4cd720da3ab98aacc3f52d9d89152b77e6b2fb256bafc25004b7648ce16327e68ad70fa0a637ad672b7695356abf5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
6ffdb42d4681ffee445fae1c3d329d77

SHA1
f8701faf78be3c1805c89fcaeb1adac178335a1e

SHA256
26a287fabdc0a350a0154cb0b0f760791e1eaab1c2dc825bac5f079787fcb30e

SHA512
55a16f325bf14a6b279ff17ffd04ef146bd9fde0f9eb32f25c5cbcd9db862c21e7d1bbef509e4e2894799e61d6656b69caa7f48f3cea6f5931d24a6b7b8de071

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
a2853dce160b622be1ae01c59154cd94

SHA1
3545c9fe36a34c0634d946817a76cc9d40e1f58d

SHA256
47f430379d689236045e60ed9b1484353b55528505ecd730d2def3303a49599f

SHA512
a7e1b275f17b99386c0b1deb2f6d2b22b82ab32bbc3219bd0f90911bd1746beb360374ec1405968dbd218f8542dc8f549c3f9cbf91c6a0fd53a0583691d315d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
e00d0d0da425824ffbee82fee1933542

SHA1
a070389a2761875526f0ed5d19aa5854e3272546

SHA256
ccb3cf35d109d66eae7f3cc1b0494af7482df0ff93e40f7b9c5a78d7d1585b48

SHA512
5fadfdd5fb1844f62f58dd8645eda4a1a799cfbc21aa66bc649750703bd0eb501c121af13de84582f2bdecc7b7d27d249c29120014c56cfb8d239544518b1aa8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
84173bfec3a75249a1a192b7483d7438

SHA1
1347f4f4c46e4f554cac6b2b59668d308f8e73b2

SHA256
3b989f108eb9a573441bca4c4f8c547f34673844baca21b21db4b43d123cf06d

SHA512
fe7a51644cca2f03ab85729f14d1defd4355001388012031a3d22adf758cab4e82ffe555122f5d3f160f7143c046452409e1cb9655f2149ca9bf07b2c2c9f265

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
ecc1e4beea3aba1f4e6ab639755c1578

SHA1
13964c533e9dbc660fb52f86f257477578396fda

SHA256
b5b0694da6a808793e20953fd7a21be236caf9378721f42ea0c02bb00d9fdaed

SHA512
780c0ce2a24b02ad200df88bac0a203398e06574ee9c25df5ec98c53be23cd3ad8a1939aa93a185ca9fcec2253202aae625839491a4fa96905db46a9fe4076bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
c9423a42fb070216eb4fb7ad904a0076

SHA1
573c7a8dfe4eb275e9c9bd252625c592db4b5b92

SHA256
30febf66f11622b1341629f28b3909455de8ab0f3868e1eaace083ef19499ee2

SHA512
2f2a65d0be1f24954e293f4caf8b277b667801501544932b7c25c4d06577fd842e54e42b405b5712d378b579370049bca752f79935e97915525d6b65d1ce2dda

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
ecc1e4beea3aba1f4e6ab639755c1578

SHA1
13964c533e9dbc660fb52f86f257477578396fda

SHA256
b5b0694da6a808793e20953fd7a21be236caf9378721f42ea0c02bb00d9fdaed

SHA512
780c0ce2a24b02ad200df88bac0a203398e06574ee9c25df5ec98c53be23cd3ad8a1939aa93a185ca9fcec2253202aae625839491a4fa96905db46a9fe4076bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
fede382b5330828b49e7b002dfc585d5

SHA1
76abc88a5933f001bd9b5d6eca6f8b628bd8a351

SHA256
bc2d31767bc661f233622cc9e6f6be6c8ddb261f9dd5d90c94ff3ca1c6519390

SHA512
3230927548b30103e0f77104758cc4b9f4b410d6c2fcd8ec7cc599b443d8e01a02673590b94af5b46df62bfff6d15914f1d03e76007f76e531d3471cc4fafb46

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
fede382b5330828b49e7b002dfc585d5

SHA1
76abc88a5933f001bd9b5d6eca6f8b628bd8a351

SHA256
bc2d31767bc661f233622cc9e6f6be6c8ddb261f9dd5d90c94ff3ca1c6519390

SHA512
3230927548b30103e0f77104758cc4b9f4b410d6c2fcd8ec7cc599b443d8e01a02673590b94af5b46df62bfff6d15914f1d03e76007f76e531d3471cc4fafb46

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
f20a33db474aec54b8de873a74014596

SHA1
80a110bcd960605b54b34d12c4183d704ad67e37

SHA256
e71b4bfa8d049530de9cc0d657a9b93659a83de56eab5c2d234ae3046794c577

SHA512
bfdcc76ac743c94102f73ffbc015158050169fc517ce3e5f2a0d31bc0017037882cc5e1687435f5903e097eb0ce850105c55fd80eed0d9fa8b13132c15b2494f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
db6d30024e79248187b82a6f1d650a9e

SHA1
dfeae9aa51194a3bbf6528e1a534334b5267352e

SHA256
a4c3d7a072e6911b04f7cc327055998e5fd967e1636d88368c0a388910995544

SHA512
1b9a3ce16ac4dcf20e67d94ef3ad67f6233ccd5cf40fa87c2b7801363c17fafd52f586668cb8b232f5132dc0294a081555f284c589ae21970330b528263313f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
c9423a42fb070216eb4fb7ad904a0076

SHA1
573c7a8dfe4eb275e9c9bd252625c592db4b5b92

SHA256
30febf66f11622b1341629f28b3909455de8ab0f3868e1eaace083ef19499ee2

SHA512
2f2a65d0be1f24954e293f4caf8b277b667801501544932b7c25c4d06577fd842e54e42b405b5712d378b579370049bca752f79935e97915525d6b65d1ce2dda

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
c9423a42fb070216eb4fb7ad904a0076

SHA1
573c7a8dfe4eb275e9c9bd252625c592db4b5b92

SHA256
30febf66f11622b1341629f28b3909455de8ab0f3868e1eaace083ef19499ee2

SHA512
2f2a65d0be1f24954e293f4caf8b277b667801501544932b7c25c4d06577fd842e54e42b405b5712d378b579370049bca752f79935e97915525d6b65d1ce2dda

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
5ada77c0bee8eb9199830d5d8ec70e35

SHA1
7653b5c7b66ab82827310cc6e3bf59061d4ea118

SHA256
6ddec41b0574df24867729f212c9c16bb58765d63778abfa608c402d0c91e62a

SHA512
c56faffe8e694c8351ca97d999b3f8180b355a9538d79127cb16e81fd5b7047635e7a9632526f5a19a0789de5e6686aeb4d51c2a96352be315139445ab64d65c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
379093204b26937e98476987e95a8f95

SHA1
55b9840e64920e144d423b4b7e03547790714e96

SHA256
c5a4c4aaecda03917b01583d664762150661e5d30d477f9022d6c4c0af927f63

SHA512
0eedf50225d6963aa700489b8c842377cb176fe7637ff6aa55539cd6f685b628c2ac35c85d767f0c521de5c23dbc499e99591b85fd84d78289be13dd1d202846

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
a030b4d93619099ffa50b41643a64541

SHA1
fca733140253dfddc74ed68d20ff3654de537b62

SHA256
934b8df9217783357ae0a7543078b404c92e3a57fd273ee5dd7a15bfd4280ae9

SHA512
3067f9b2ba1c09c8037e358cedc8446aedb35fe4a2ecdbea21d2211918237df61e7b3a64c92a278eae8355b52faed31cc9048b749b241838a1729a329fccf6cc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
a030b4d93619099ffa50b41643a64541

SHA1
fca733140253dfddc74ed68d20ff3654de537b62

SHA256
934b8df9217783357ae0a7543078b404c92e3a57fd273ee5dd7a15bfd4280ae9

SHA512
3067f9b2ba1c09c8037e358cedc8446aedb35fe4a2ecdbea21d2211918237df61e7b3a64c92a278eae8355b52faed31cc9048b749b241838a1729a329fccf6cc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
67f6cb82a643a0589232874dce8a9716

SHA1
384a4f7ae8ab4df28219ec5a5cda0712dcb5089e

SHA256
226331f0c4dfdb1aba1d64060c8001e71955626359dfabb29fa2a951da53b389

SHA512
7a255614bd7910be41619b0684969ca2b24964e93f674edb86d9639838697559317553f3faa152914f08cf026479b42e388597115a511953098faca6a9c22f49

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
6d8df3665188be8c467e7761af65e012

SHA1
7f15c74421f3c61295b9fd7efad07ad37e0328df

SHA256
998f7736272cef929ef314c3bba11c169660f0ac3f6132d9fd6e83382df60c81

SHA512
327cd60b4ef8f180cc8084d8425a9f0cc57a80a66b0039d295136ea7ac0df29f38edea536dd54888d809fdae6047a892cc731a1c1d30d040c3dfd3a90abbf991

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
6d8df3665188be8c467e7761af65e012

SHA1
7f15c74421f3c61295b9fd7efad07ad37e0328df

SHA256
998f7736272cef929ef314c3bba11c169660f0ac3f6132d9fd6e83382df60c81

SHA512
327cd60b4ef8f180cc8084d8425a9f0cc57a80a66b0039d295136ea7ac0df29f38edea536dd54888d809fdae6047a892cc731a1c1d30d040c3dfd3a90abbf991

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
7fca600c6bee2828a7371e3dd0182a5a

SHA1
de3ca4261de3de91c3a008529b8f92db68e8cf09

SHA256
5e2d411d1fe6da136288f0677f150d9e62ebb59b558762e8b5c2091722829df6

SHA512
6ce1d034cf2594d6c018d7766c6384967b3ae9115fa1c7e97fd0ee59fc6beeb050a7631992d0fd1ae93cd25d922faf15b1a021b6ee037173209e960e30e8abf1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
13f16dc6bdedc72590b422fb356496c5

SHA1
6cff753b99e487361f47f1a9af7c3da4be363533

SHA256
7c1794bd63c978a237c3b79a764df605a4eb209790d83dff0abb7be7d94b023e

SHA512
fb4316950d0c64e9810991c3236896c52e1385cead667af1f0ecd0d53f28edf426b2d277bc0f7368c95f9aa3221c4645f639a06bcb6ae4ff296d9b794e5d2d22

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
13f16dc6bdedc72590b422fb356496c5

SHA1
6cff753b99e487361f47f1a9af7c3da4be363533

SHA256
7c1794bd63c978a237c3b79a764df605a4eb209790d83dff0abb7be7d94b023e

SHA512
fb4316950d0c64e9810991c3236896c52e1385cead667af1f0ecd0d53f28edf426b2d277bc0f7368c95f9aa3221c4645f639a06bcb6ae4ff296d9b794e5d2d22

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
ea17c4450d1638b0d58cc70f66d82eed

SHA1
5274b9e47370368c566f1b81e273f6fed76b777a

SHA256
85bc082e63f1924efc2e7ec018b52b0c0c64a94d41153c5310265784178b7705

SHA512
b011939996b7139df1bb12337e7ef6d21884480b30e7f2bb12175f7017444b41944083e0bef6afeb27e2026fae1c17b68595e5c66a48c6853c1625dad5b6ed6d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
ea17c4450d1638b0d58cc70f66d82eed

SHA1
5274b9e47370368c566f1b81e273f6fed76b777a

SHA256
85bc082e63f1924efc2e7ec018b52b0c0c64a94d41153c5310265784178b7705

SHA512
b011939996b7139df1bb12337e7ef6d21884480b30e7f2bb12175f7017444b41944083e0bef6afeb27e2026fae1c17b68595e5c66a48c6853c1625dad5b6ed6d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
2041f394f08fa4ed52712aa341a6b30c

SHA1
0cf07b4d2051d6fda4eb930bf096815a390879a1

SHA256
7fafefbbdf273e973938cf97b3e23c46b66dfa7bc90019ddf88fc230dfd6f196

SHA512
7db2c784b8e35aea6c331061d3b4ddd1d45cd8b363d949c283158f3bbea890ba87c9d54f4644a7810c651d565f27548682bf1a1fd5005bcb80d8a44050f9ce73

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
be987bfabf1ba5596d99cad909f2a540

SHA1
183d3e969f43dd23362b325d7ed19c7a399e33c0

SHA256
3ffb70e7bf657c276d9276036e72b09bb15e6e061d5e0def0fc59990f66de6ed

SHA512
652190c29ba346861a13760184ce6a562f1e27ba1a89b8aac04d505eedcedea54c8d5341971e328b096ad6078dfeca7837725ec758af175136c90a579f764d24

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
2041f394f08fa4ed52712aa341a6b30c

SHA1
0cf07b4d2051d6fda4eb930bf096815a390879a1

SHA256
7fafefbbdf273e973938cf97b3e23c46b66dfa7bc90019ddf88fc230dfd6f196

SHA512
7db2c784b8e35aea6c331061d3b4ddd1d45cd8b363d949c283158f3bbea890ba87c9d54f4644a7810c651d565f27548682bf1a1fd5005bcb80d8a44050f9ce73

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
2041f394f08fa4ed52712aa341a6b30c

SHA1
0cf07b4d2051d6fda4eb930bf096815a390879a1

SHA256
7fafefbbdf273e973938cf97b3e23c46b66dfa7bc90019ddf88fc230dfd6f196

SHA512
7db2c784b8e35aea6c331061d3b4ddd1d45cd8b363d949c283158f3bbea890ba87c9d54f4644a7810c651d565f27548682bf1a1fd5005bcb80d8a44050f9ce73

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
e8eb0f0448b31ab162c36185a5a38f52

SHA1
6f2bf6af383a4cbe100dadb0ee82cca80b52608b

SHA256
6cae3df308a0a5fc867540c4c6c369d1fb8bfc4195a4765aa81aac21f951fac9

SHA512
10eb5294157a5d53db4f256e4ea437f2c8bae4f53f510379c77bf715b9390a20897fbe558384222cca2b17549defd4d23bbe9ec19cdc25a35c757d9762018c26

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
3ab825ddf394fb4b154811912f8480a7

SHA1
5e6ab0298d9b1e79e88979fc5f51578ee78dbbc4

SHA256
8d4c5a6b65d3c25c5c4861dac463d466354e5f3356067c26a8a068e931596887

SHA512
ce75322af9b165b314c9aca08a017d8a750b647115897af77b0ca86d936875998d789862e76a8dcc0e06d007ad69fb450e07e9fd4d1a00be07d107e927a4ebee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
3ab825ddf394fb4b154811912f8480a7

SHA1
5e6ab0298d9b1e79e88979fc5f51578ee78dbbc4

SHA256
8d4c5a6b65d3c25c5c4861dac463d466354e5f3356067c26a8a068e931596887

SHA512
ce75322af9b165b314c9aca08a017d8a750b647115897af77b0ca86d936875998d789862e76a8dcc0e06d007ad69fb450e07e9fd4d1a00be07d107e927a4ebee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
9c065301e236053dd1f265feb8c04ee5

SHA1
57e21fed8d33b4057b718680fad5771bc27d05da

SHA256
687b37be2cadfe42c19b591fa9800b0d75e913e37e965de98f68c86eadaaa6c5

SHA512
e8e4180997ee4dd900407c2562b35c49ae6325057dcf86a040464e3c86080b07133d7ccf9b9e08c911a9b151fd0d225496a1fdf0afd899a06d5eb3449220cf85

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
1024KB

MD5
0c92521ca6ee3caed75a88d8cd8b5604

SHA1
37d7d9f8ec9df77524a560800d9fa19e1b8b79db

SHA256
b0016a501131167781c075ae81f99057b3c3ebb8c98f882ea4b68ef17354a266

SHA512
d72d1527072d7289886fc04fffadd206cf0012d5e0b81550c91be8ab6d86b72209ab00beea445918e5a8d86dcdd7e86964fbffa32819ce831fc38fa3f39753fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML

Filesize
9KB

MD5
7050d5ae8acfbe560fa11073fef8185d

SHA1
5bc38e77ff06785fe0aec5a345c4ccd15752560e

SHA256
cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b

SHA512
a7a295ac8921bb3dde58d4bcde9372ed59def61d4b7699057274960fa8c1d1a1daff834a93f7a0698e9e5c16db43af05e9fd2d6d7c9232f7d26ffcff5fc5900b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\LZ0AI98S\WMPa58511d0-5ff9-471e-83e5-8a7a9403e57e[1].png

Filesize
20KB

MD5
d453dfad1a7818a7be02c4e5d0ea61fa

SHA1
903deab18849d1514bda318ada8720b5dc90d93a

SHA256
1107eaf34948ecfbce6619a6e0a2bdc8ba63383bc5a03f1bfe34b1c52cb433c7

SHA512
43883b801149712e20774ba7a96f3c32447623dbece0fc9165bae9b76c725939cbeeb65665bc8d605061612c234d15a19dc36782460d9d195b254dff9c31f8eb

Download Submit
C:\Users\Admin\AppData\Local\Temp\wmsetup.log

Filesize
1KB

MD5
650ba08b904fe51156fce9db2624047e

SHA1
a39c8bd29eea8539fa1adc44cf9dd5a4a18b50f7

SHA256
3dba24564454f57fdcaaede18b6646914e09ac4710e5294d49eb7084dc2c97d0

SHA512
fb4ec064eb0a0378e1348656df84f20dfabc53833bdb09ae1ea4a91ce48e1770f0ebe8d5efa16ff3607d00320b3f0bc79d70227cd136cb275b6df2c6f8657583

Download Submit
C:\Users\Admin\Downloads\Virus-for-win-10-main.zip.crdownload

Filesize
95KB

MD5
bceed6c4a9ea2cb86ddb381ff94296a7

SHA1
d5b767e9279dfabf614891f6f58b2345461f0398

SHA256
e75e58fa5e29800d184936a18792b7dc7e9b66a90484b81197dd71a257af550f

SHA512
40df6b5d8eee470621b943be54b1a9f3696ff36d3eb4c6cbf530b790954b92068a5b51e92d9c4392b52d151d1a08ce9eef10fe6973fdc04abe6e0cde356ae194

Download Submit
memory/864-809-0x000002D8F9390000-0x000002D8F9AB9000-memory.dmp

Filesize
7.2MB

Download
memory/1800-728-0x0000012F21E50000-0x0000012F22579000-memory.dmp

Filesize
7.2MB

Download
memory/1952-723-0x000002244E280000-0x000002244E9A9000-memory.dmp

Filesize
7.2MB

Download
memory/2004-843-0x00000258A33E0000-0x00000258A3B09000-memory.dmp

Filesize
7.2MB

Download
memory/2328-733-0x0000024290540000-0x0000024290C69000-memory.dmp

Filesize
7.2MB

Download
memory/2372-736-0x000001AFC7230000-0x000001AFC7959000-memory.dmp

Filesize
7.2MB

Download
memory/2776-817-0x00000206187A0000-0x0000020618EC9000-memory.dmp

Filesize
7.2MB

Download
memory/2776-711-0x000001C7025D0000-0x000001C702CF9000-memory.dmp

Filesize
7.2MB

Download
memory/2876-726-0x00000143BF560000-0x00000143BFC89000-memory.dmp

Filesize
7.2MB

Download
memory/3352-798-0x000002119B370000-0x000002119BA99000-memory.dmp

Filesize
7.2MB

Download
memory/3412-721-0x0000029113000000-0x0000029113729000-memory.dmp

Filesize
7.2MB

Download
memory/3428-724-0x0000025456AD0000-0x00000254571F9000-memory.dmp

Filesize
7.2MB

Download
memory/3432-743-0x00000269B19B0000-0x00000269B20D9000-memory.dmp

Filesize
7.2MB

Download
memory/3600-735-0x000001FF49AD0000-0x000001FF4A1F9000-memory.dmp

Filesize
7.2MB

Download
memory/4000-816-0x0000018F44480000-0x0000018F44BA9000-memory.dmp

Filesize
7.2MB

Download
memory/4032-725-0x000001F1B5B90000-0x000001F1B62B9000-memory.dmp

Filesize
7.2MB

Download
memory/4224-734-0x000001BAF5220000-0x000001BAF5949000-memory.dmp

Filesize
7.2MB

Download
memory/4408-727-0x0000015F06640000-0x0000015F06D69000-memory.dmp

Filesize
7.2MB

Download
memory/4680-729-0x00000154FD3D0000-0x00000154FDAF9000-memory.dmp

Filesize
7.2MB

Download
memory/4764-737-0x0000029E3FDB0000-0x0000029E404D9000-memory.dmp

Filesize
7.2MB

Download
memory/4780-808-0x000002AD16300000-0x000002AD16A29000-memory.dmp

Filesize
7.2MB

Download
memory/4856-745-0x0000027F35150000-0x0000027F35879000-memory.dmp

Filesize
7.2MB

Download
memory/4952-722-0x000002A8E8860000-0x000002A8E8F89000-memory.dmp

Filesize
7.2MB

Download
memory/5040-842-0x0000015A75580000-0x0000015A75CA9000-memory.dmp

Filesize
7.2MB

Download
memory/5136-823-0x0000028E14B50000-0x0000028E15279000-memory.dmp

Filesize
7.2MB

Download
memory/5168-815-0x000001C593550000-0x000001C593C79000-memory.dmp

Filesize
7.2MB

Download
memory/5196-744-0x0000027B306D0000-0x0000027B30DF9000-memory.dmp

Filesize
7.2MB

Download
memory/5280-778-0x000001A14A660000-0x000001A14AD89000-memory.dmp

Filesize
7.2MB

Download
memory/5360-746-0x00000281E8350000-0x00000281E8A79000-memory.dmp

Filesize
7.2MB

Download
memory/5416-831-0x000002360FE80000-0x00000236105A9000-memory.dmp

Filesize
7.2MB

Download
memory/5416-748-0x0000017886C00000-0x0000017887329000-memory.dmp

Filesize
7.2MB

Download
memory/5420-827-0x000001BC2E3F0000-0x000001BC2EB19000-memory.dmp

Filesize
7.2MB

Download
memory/5448-763-0x000001A3832B0000-0x000001A3839D9000-memory.dmp

Filesize
7.2MB

Download
memory/5512-787-0x000001BC748D0000-0x000001BC74FF9000-memory.dmp

Filesize
7.2MB

Download
memory/5544-780-0x0000020C3EBA0000-0x0000020C3F2C9000-memory.dmp

Filesize
7.2MB

Download
memory/5600-782-0x0000016D16610000-0x0000016D16D39000-memory.dmp

Filesize
7.2MB

Download
memory/5636-768-0x0000024CC0410000-0x0000024CC0B39000-memory.dmp

Filesize
7.2MB

Download
memory/5680-774-0x000001F1399B0000-0x000001F13A0D9000-memory.dmp

Filesize
7.2MB

Download
memory/5700-786-0x0000025F4DDD0000-0x0000025F4E4F9000-memory.dmp

Filesize
7.2MB

Download
memory/5720-781-0x000001BB77810000-0x000001BB77F39000-memory.dmp

Filesize
7.2MB

Download
memory/5752-769-0x00000235B7440000-0x00000235B7B69000-memory.dmp

Filesize
7.2MB

Download
memory/5784-776-0x000002264AB40000-0x000002264B269000-memory.dmp

Filesize
7.2MB

Download
memory/5852-770-0x00000152B9530000-0x00000152B9C59000-memory.dmp

Filesize
7.2MB

Download
memory/5868-767-0x000002428BFD0000-0x000002428C6F9000-memory.dmp

Filesize
7.2MB

Download
memory/5896-779-0x000001749D8C0000-0x000001749DFE9000-memory.dmp

Filesize
7.2MB

Download
memory/5928-777-0x000001475BF80000-0x000001475C6A9000-memory.dmp

Filesize
7.2MB

Download
memory/5988-759-0x000001E9F4500000-0x000001E9F4C29000-memory.dmp

Filesize
7.2MB

Download
memory/6032-847-0x0000017457340000-0x0000017457A69000-memory.dmp

Filesize
7.2MB

Download
memory/6060-775-0x000002690B760000-0x000002690BE89000-memory.dmp

Filesize
7.2MB

Download
memory/6076-766-0x0000016F944B0000-0x0000016F94BD9000-memory.dmp

Filesize
7.2MB

Download
memory/6532-789-0x000002490E700000-0x000002490EE29000-memory.dmp

Filesize
7.2MB

Download
memory/6644-799-0x000002102C7B0000-0x000002102CED9000-memory.dmp

Filesize
7.2MB

Download
memory/6764-812-0x00000225FCFA0000-0x00000225FD6C9000-memory.dmp

Filesize
7.2MB

Download
memory/6768-796-0x0000016F87EB0000-0x0000016F885D9000-memory.dmp

Filesize
7.2MB

Download
memory/6884-795-0x000001DA249B0000-0x000001DA250D9000-memory.dmp

Filesize
7.2MB

Download
memory/6984-790-0x0000022536830000-0x0000022536F59000-memory.dmp

Filesize
7.2MB

Download
memory/7032-803-0x0000029126F40000-0x0000029127669000-memory.dmp

Filesize
7.2MB

Download
memory/7044-797-0x000002A7EA0C0000-0x000002A7EA7E9000-memory.dmp

Filesize
7.2MB

Download
memory/7112-791-0x000001CE50EB0000-0x000001CE515D9000-memory.dmp

Filesize
7.2MB

Download
memory/7148-811-0x000002A84F370000-0x000002A84FA99000-memory.dmp

Filesize
7.2MB

Download
memory/7148-806-0x000002A84E5E0000-0x000002A84F0E4000-memory.dmp

Filesize
11.0MB

Download