572a570bfbd6673cf69702aa278d5bd676c3eac5b0c7bfe40f9e21f5b7878ae6

Resubmissions

14/10/2023, 19:08

231014-xtafqagd67 9

14/10/2023, 09:34

231014-ljwenabg2t 7

07/10/2023, 01:02

231007-bdzvsagf4z 9

Analysis

max time kernel
1218s
max time network
1220s
platform
windows10-1703_x64
resource
win10-20230915-en
resource tags

arch:x64arch:x86image:win10-20230915-enlocale:en-usos:windows10-1703-x64system
submitted
14/10/2023, 19:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

SephioneInstallerx64.exe
Size

67.6MB
MD5

742066e6d7103fa65e2af4db9063db3d
SHA1

3fe605e0a6260d4442e7b67663624cd6b4525636
SHA256

2cd9a6de7cabf360187ad8fc4163e10be7bcf4bbd768f8db635cc57438385352
SHA512

a9f7cab452cd1106884150e4d494fa684dda9931e2d448559158de979d8b134cf83f3603e9e0bf0a41b72e16bece6a421645b0d01a31375f4a91d7c1196e965f
SSDEEP

1572864:jhF1s9gK1YPHnrgsOu/Yy/KAtkui9bTBBfTzy4:jhF1s6oXyyAtviRPy4

Score

7^/10

discovery spyware stealer

Malware Config

Signatures

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Updater.exe	Setup_.exe

Executes dropped EXE 4 IoCs

pid	Process
1736	Setup_.exe
3880	Setup_.exe
3632	Setup_.exe
4808	Setup_.exe

Loads dropped DLL 14 IoCs

pid	Process
216	SephioneInstallerx64.exe
216	SephioneInstallerx64.exe
216	SephioneInstallerx64.exe
216	SephioneInstallerx64.exe
216	SephioneInstallerx64.exe
1736	Setup_.exe
1736	Setup_.exe
3880	Setup_.exe
3880	Setup_.exe
3880	Setup_.exe
3880	Setup_.exe
1736	Setup_.exe
3632	Setup_.exe
4808	Setup_.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates processes with tasklist 1 TTPs 3 IoCs

Process Discovery

T1057

pid	Process
4484	tasklist.exe
2208	tasklist.exe
196	tasklist.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
216	SephioneInstallerx64.exe
216	SephioneInstallerx64.exe
4484	tasklist.exe
4484	tasklist.exe
1736	Setup_.exe
1736	Setup_.exe
1736	Setup_.exe
1736	Setup_.exe
1736	Setup_.exe
1736	Setup_.exe
3632	Setup_.exe
3632	Setup_.exe
4808	Setup_.exe
4808	Setup_.exe
4808	Setup_.exe
4808	Setup_.exe
4372	powershell.exe
4372	powershell.exe
4372	powershell.exe
4992	powershell.exe
4992	powershell.exe
4992	powershell.exe
2204	powershell.exe
2204	powershell.exe
2204	powershell.exe
1440	powershell.exe
1440	powershell.exe
1440	powershell.exe
2196	powershell.exe
2196	powershell.exe
2196	powershell.exe
596	powershell.exe
596	powershell.exe
596	powershell.exe
3960	powershell.exe
3960	powershell.exe
3960	powershell.exe
4588	powershell.exe
4588	powershell.exe
4588	powershell.exe
4776	powershell.exe
4776	powershell.exe
4776	powershell.exe
920	powershell.exe
920	powershell.exe
920	powershell.exe
3692	powershell.exe
3692	powershell.exe
3692	powershell.exe
1664	powershell.exe
1664	powershell.exe
1664	powershell.exe
1936	powershell.exe
1936	powershell.exe
1936	powershell.exe
1172	powershell.exe
1172	powershell.exe
1172	powershell.exe
3532	powershell.exe
3532	powershell.exe
3532	powershell.exe
1472	powershell.exe
1472	powershell.exe
1472	powershell.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	4484	tasklist.exe
Token: SeSecurityPrivilege	216	SephioneInstallerx64.exe
Token: SeDebugPrivilege	2208	tasklist.exe
Token: SeDebugPrivilege	196	tasklist.exe
Token: SeDebugPrivilege	4372	powershell.exe
Token: SeDebugPrivilege	4992	powershell.exe
Token: SeDebugPrivilege	2204	powershell.exe
Token: SeDebugPrivilege	1440	powershell.exe
Token: SeDebugPrivilege	2196	powershell.exe
Token: SeDebugPrivilege	596	powershell.exe
Token: SeDebugPrivilege	3960	powershell.exe
Token: SeDebugPrivilege	4588	powershell.exe
Token: SeDebugPrivilege	4776	powershell.exe
Token: SeDebugPrivilege	920	powershell.exe
Token: SeDebugPrivilege	3692	powershell.exe
Token: SeDebugPrivilege	1664	powershell.exe
Token: SeDebugPrivilege	1936	powershell.exe
Token: SeDebugPrivilege	1172	powershell.exe
Token: SeDebugPrivilege	3532	powershell.exe
Token: SeDebugPrivilege	1472	powershell.exe
Token: SeDebugPrivilege	3100	powershell.exe
Token: SeDebugPrivilege	1256	powershell.exe
Token: SeDebugPrivilege	3412	powershell.exe
Token: SeDebugPrivilege	4512	powershell.exe
Token: SeDebugPrivilege	3148	powershell.exe
Token: SeDebugPrivilege	360	powershell.exe
Token: SeDebugPrivilege	3660	powershell.exe
Token: SeDebugPrivilege	1788	powershell.exe
Token: SeDebugPrivilege	3604	powershell.exe
Token: SeDebugPrivilege	5040	powershell.exe
Token: SeDebugPrivilege	4828	powershell.exe
Token: SeDebugPrivilege	880	powershell.exe
Token: SeDebugPrivilege	5044	powershell.exe
Token: SeDebugPrivilege	2984	powershell.exe
Token: SeDebugPrivilege	4424	powershell.exe
Token: SeDebugPrivilege	5080	powershell.exe
Token: SeDebugPrivilege	3356	powershell.exe
Token: SeDebugPrivilege	3624	powershell.exe
Token: SeDebugPrivilege	4376	powershell.exe
Token: SeDebugPrivilege	4388	powershell.exe
Token: SeDebugPrivilege	5100	powershell.exe
Token: SeDebugPrivilege	364	powershell.exe
Token: SeDebugPrivilege	4200	powershell.exe
Token: SeDebugPrivilege	3856	powershell.exe
Token: SeDebugPrivilege	3712	powershell.exe
Token: SeDebugPrivilege	4636	powershell.exe
Token: SeDebugPrivilege	3768	powershell.exe
Token: SeDebugPrivilege	4156	powershell.exe
Token: SeDebugPrivilege	1484	powershell.exe
Token: SeDebugPrivilege	3848	powershell.exe
Token: SeDebugPrivilege	4968	powershell.exe
Token: SeDebugPrivilege	3824	powershell.exe
Token: SeDebugPrivilege	4780	powershell.exe
Token: SeDebugPrivilege	1256	powershell.exe
Token: SeDebugPrivilege	4668	powershell.exe
Token: SeDebugPrivilege	1668	powershell.exe
Token: SeDebugPrivilege	2912	powershell.exe
Token: SeDebugPrivilege	4304	powershell.exe
Token: SeDebugPrivilege	4728	powershell.exe
Token: SeDebugPrivilege	1220	powershell.exe
Token: SeDebugPrivilege	5092	powershell.exe
Token: SeDebugPrivilege	2504	powershell.exe
Token: SeDebugPrivilege	3696	powershell.exe
Token: SeDebugPrivilege	1572	powershell.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 216 wrote to memory of 1468	216	SephioneInstallerx64.exe	70
PID 216 wrote to memory of 1468	216	SephioneInstallerx64.exe	70
PID 216 wrote to memory of 1468	216	SephioneInstallerx64.exe	70
PID 1468 wrote to memory of 4484	1468	cmd.exe	72
PID 1468 wrote to memory of 4484	1468	cmd.exe	72
PID 1468 wrote to memory of 4484	1468	cmd.exe	72
PID 1468 wrote to memory of 3776	1468	cmd.exe	73
PID 1468 wrote to memory of 3776	1468	cmd.exe	73
PID 1468 wrote to memory of 3776	1468	cmd.exe	73
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 3880	1736	Setup_.exe	78
PID 1736 wrote to memory of 4060	1736	Setup_.exe	79
PID 1736 wrote to memory of 4060	1736	Setup_.exe	79
PID 4060 wrote to memory of 2208	4060	cmd.exe	81
PID 4060 wrote to memory of 2208	4060	cmd.exe	81
PID 1736 wrote to memory of 4452	1736	Setup_.exe	82
PID 1736 wrote to memory of 4452	1736	Setup_.exe	82
PID 1736 wrote to memory of 3632	1736	Setup_.exe	84
PID 1736 wrote to memory of 3632	1736	Setup_.exe	84
PID 4452 wrote to memory of 196	4452	cmd.exe	85
PID 4452 wrote to memory of 196	4452	cmd.exe	85
PID 1736 wrote to memory of 4808	1736	Setup_.exe	86
PID 1736 wrote to memory of 4808	1736	Setup_.exe	86
PID 1736 wrote to memory of 660	1736	Setup_.exe	87
PID 1736 wrote to memory of 660	1736	Setup_.exe	87
PID 660 wrote to memory of 4372	660	cmd.exe	89

C:\Users\Admin\AppData\Local\Temp\SephioneInstallerx64.exe
"C:\Users\Admin\AppData\Local\Temp\SephioneInstallerx64.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:216
- C:\Windows\SysWOW64\cmd.exe
  cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Setup_.exe" | %SYSTEMROOT%\System32\find.exe "Setup_.exe"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1468
- - C:\Windows\SysWOW64\tasklist.exe
    tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Setup_.exe"
    3⤵
    - Enumerates processes with tasklist
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:4484
- - C:\Windows\SysWOW64\find.exe
    C:\Windows\System32\find.exe "Setup_.exe"
    3⤵
    PID:3776

C:\Users\Admin\AppData\Local\Programs\Setup_\Setup_.exe
"C:\Users\Admin\AppData\Local\Programs\Setup_\Setup_.exe"
1⤵
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1736
- C:\Users\Admin\AppData\Local\Programs\Setup_\Setup_.exe
  "C:\Users\Admin\AppData\Local\Programs\Setup_\Setup_.exe" --type=gpu-process --field-trial-handle=1544,278690112620901142,9473749450490816343,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1548 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3880
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "tasklist"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4060
- - C:\Windows\system32\tasklist.exe
    tasklist
    3⤵
    - Enumerates processes with tasklist
    - Suspicious use of AdjustPrivilegeToken
    PID:2208
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "tasklist"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4452
- - C:\Windows\system32\tasklist.exe
    tasklist
    3⤵
    - Enumerates processes with tasklist
    - Suspicious use of AdjustPrivilegeToken
    PID:196
- C:\Users\Admin\AppData\Local\Programs\Setup_\Setup_.exe
  "C:\Users\Admin\AppData\Local\Programs\Setup_\Setup_.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1544,278690112620901142,9473749450490816343,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1796 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:3632
- C:\Users\Admin\AppData\Local\Programs\Setup_\Setup_.exe
  "C:\Users\Admin\AppData\Local\Programs\Setup_\Setup_.exe" --type=gpu-process --field-trial-handle=1544,278690112620901142,9473749450490816343,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1328 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:4808
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:660
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:4372
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3112
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:4992
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:436
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:2204
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3684
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:1440
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5068
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:2196
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2916
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:596
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2976
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:3960
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:924
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:4588
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2004
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:4776
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4500
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:920
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:200
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:3692
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3828
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:1664
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5100
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:1936
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:384
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:1172
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3504
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:3532
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4220
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:1472
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4176
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3100
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3176
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1256
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3696
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3412
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5060
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:4512
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2080
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3148
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3056
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:360
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4112
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3660
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2096
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1788
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4504
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3604
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2264
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:5040
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4560
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:4828
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5076
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:880
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4924
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:5044
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2768
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2984
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2976
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:4424
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4524
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:5080
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4776
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3356
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:32
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3624
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3752
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:4376
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4852
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:4388
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4384
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:5100
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3124
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:364
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2916
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:4200
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2156
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3856
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4540
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3712
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5028
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:4636
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3256
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3768
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4196
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:4156
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1104
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1484
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3076
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3848
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4408
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:4968
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4732
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3824
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2276
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:4780
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2600
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1256
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:428
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:4668
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3788
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1668
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3280
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2912
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4452
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:4304
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1172
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:4728
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4408
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1220
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4732
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:5092
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4484
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:2504
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4988
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3696
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2432
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:1572
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4344
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2196
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2384
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1072
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:196
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4772
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1696
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4588
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3824
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4800
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5092
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:792
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2504
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:380
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3696
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4352
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2068
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2744
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1112
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2544
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4368
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3292
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4760
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4896
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3528
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1448
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3780
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1404
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4508
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3256
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2160
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4944
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:720
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4412
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4512
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2360
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2500
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4020
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1328
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:660
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1172
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4780
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2176
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4636
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4672
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1680
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3256
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4484
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4944
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4988
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4412
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3416
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2760
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4180
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3960
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1220
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4928
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2588
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4452
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3348
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3764
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3904
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5016
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1392
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3144
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4516
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1664
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3564
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4924
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2916
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4120
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4572
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5068
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4756
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2788
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3128
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1172
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4380
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3780
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:5076
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:956
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4920
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:952
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:360
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2296
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4052
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1092
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1748
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:828
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:216
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1424
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2264
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3088
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2952
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4452
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4428
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3780
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:244
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5092
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2244
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:952
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3472
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5108
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4524
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:720
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3708
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4300
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4636
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4344
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4732
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4368
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3408
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1032
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1696
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2064
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4960
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2200
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:5092
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3964
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3852
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3856
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4980
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4780
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:224
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4188
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2728
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3120
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3768
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4972
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2788
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2236
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4888
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4492
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4056
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2304
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2244
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:660
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3020
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:324
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1020
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4820
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3380
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4444
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3392
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4388
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2500
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5012
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1668
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3384
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1172
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4640
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2176
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:764
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1244
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2780
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4508
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1020
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1092
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4840
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:720
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1572
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4512
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4516
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4344
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:688
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4368
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3980
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3528
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:192
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2064
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2128
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2244
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3568
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3964
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5108
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4192
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:720
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3392
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4512
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2500
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2900
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3952
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:664
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3884
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1536
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4776
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4640
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4876
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2504
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2660
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1664
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1440
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3696
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2196
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3380
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2344
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4188
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3144
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3088
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4388
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1788
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3408
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:828
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2236
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3064
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2176
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3588
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:832
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4408
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:660
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5100
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3696
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:600
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4756
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2600
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:96
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:836
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3952
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4536
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4972
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5040
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2820
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4244
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4960
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4448
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2304
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2800
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2780
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4304
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:324
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3956
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4444
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1820
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3084
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3100
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4920
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2200
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4928
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:68
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4632
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4352
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:380
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3392
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:832
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1944
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:660
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3780
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1396
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4888
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2240
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3356
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3400
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2264
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1636
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2256
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4972
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4464
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1536
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1404
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4640
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2768
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2304
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4052
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2208
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4076
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3696
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:216
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4756
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4412
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:96
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3776
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4516
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3828
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1352
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3852
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2272
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3524
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4300
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4368
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2860
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3948
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2976
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4344
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2836
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1960
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:216
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4560
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4904
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4484
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1636
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3552
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3828
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2984
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3852
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4112
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3524
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:956
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:5024
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3076
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3528
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4688
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1396
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4416
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2492
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4852
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3400
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5032
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3952
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4448
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1680
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4424
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2556
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1356
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:508
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:516
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2504
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5068
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3528
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5084
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1396
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:992
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3956
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2168
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4492
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3420
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4408
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4940
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1112
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1516
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3724
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2900
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2304
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3120
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:832
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3548
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3948
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4920
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1192
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3408
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:992
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1392
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2168
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4848
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1092
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4224
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2844
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4540
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4896
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3560
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1704
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4480
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2780
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2236
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3528
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4060
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2600
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4364
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:992
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2704
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3532
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:924
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4508
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2296
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:232
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3472
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1572
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4184
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4524
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2816
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2504
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2176
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2064
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1524
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3452
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2820
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2256
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2920
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3536
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1264
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4808
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5028
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4940
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3112
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4896
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4828
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1704
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5044
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2780
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4752
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3528
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4268
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3452
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4972
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4780
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1536
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2704
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:492
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2204
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4368
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2056
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2412
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:8
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:768
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1328
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4412
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:5076
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2788
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3056
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4668
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4116
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4840
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2256
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1292
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2704
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4052
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2204
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:316
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2056
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2264
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:8
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:68
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1328
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3764
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:5076
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1472
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3056
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2368
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2600
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5080
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4780
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4636
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2704
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2660
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4788
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4776
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2604
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2648
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4524
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3660
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2780
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1944
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1104
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4408
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3056
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4988
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2600
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3848
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4780
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3936
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4800
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2744
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2844
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4828
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4812
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4168
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4904
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3208
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4452
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2096
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:5096
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:428
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3056
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4820
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4116
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3468
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1144
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2900
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2704
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1704
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2204
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1636
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2604
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2064
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4524
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:324
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4376
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3080
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:5076
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4796
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4928
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:760
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:992
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1016
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2256
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5068
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1256
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2644
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2844
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1192
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4812
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3868
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2240
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1392
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2780
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3076
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1104
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2768
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4928
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1484
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:992
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5060
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1144
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2196
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4948
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1524
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3088
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4020
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:596
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:60
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4668
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3780
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4476
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:644
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4504
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4052
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3768
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3564
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2244
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4156
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3100
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1328
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4800
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2844
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4220
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4396
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1284
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4424
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4492
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4376
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2432
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:232
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3712
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4416
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4896
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2412
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4356
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1144
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:164
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2680
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4948
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:244
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2604
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4288
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3868
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:32
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2156
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4832
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1588
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2972
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4928
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2744
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4888
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4308
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1072
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4468
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2800
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2716
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4948
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1220
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4756
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1168
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:600
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2688
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:380
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1172
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2304
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4380
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3140
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2416
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:5104
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2412
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4640
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1144
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3124
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2844
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3280
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1636
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2064
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1472
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1556
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4924
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2288
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1664
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4940
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1112
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3120
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:376
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4416
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3764
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3892
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3452
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:64
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5100
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1256
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3868
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4484
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5116
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4540
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3948
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:5028
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4560
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1588
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1820
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2860
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:768
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1016
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1524
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4776
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4396
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3124
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4244
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3280
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4408
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2064
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4352
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1556
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:924
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2688
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3548
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4512
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3560
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3724
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4428
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4416
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1692
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4468
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2208
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3788
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:32
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4244
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4184
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2368
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3456
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1140
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3116
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2288
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3956
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1172
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3292
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2860
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4960
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2416
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:596
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3892
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1420
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3788
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4832
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4244
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3712
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2976
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:364
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1824
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4384
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4304
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4728
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4560
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4364
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3724
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3080
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3448
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2796
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4468
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4176
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4396
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1888
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3504
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3980
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3128
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4876
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1824
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4852
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3116
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2412
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4356
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2984
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:316
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1788
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3852
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4808
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2276
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4232
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1256
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3176
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4572
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4760
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4408
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1668
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4536
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1224
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1144
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:828
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4560
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4668
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1432
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1356
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4180
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4444
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2480
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3084
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4116
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3468
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2944
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:880
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3128
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2788
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:5036
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4800
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:244
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1092
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2820
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4752
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4376
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2300
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4180
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:604
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2480
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3400
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3076
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2264
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2944
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3416
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3100
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4172
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3696
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1692
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1144
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:600
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2096
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4588
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:216
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5076
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3780
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4380
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1008
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3396
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1732
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4384
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4440
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1068
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1744
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1468
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3416
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:792
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3120
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2292
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1524
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1864
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3280
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2676
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:192
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2004
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4368
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2744
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:5112
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4632
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4488
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4156
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2680
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1676
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4360
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4268
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3912
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2716
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3728
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2416
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1752
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5100
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4808
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4396
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4780
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4244
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4640
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:68
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:5028
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3088
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3592
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2800
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1764
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2012
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4520
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4776
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3380
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4524
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:408
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4668
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2796
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2244
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4588
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2384
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3780
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3348
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1696
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:96
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:5108
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4884
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1776
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4140
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1532
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4828
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2828
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3696
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:792
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1344
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:688
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1404
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3056
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:316
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3788
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:992
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1556
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5104
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3144
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5088
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1944
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4308
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2204
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1536
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4360
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1020
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2012
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4800
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4776
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2600
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4972
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5096
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1356
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4380
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1352
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2288
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4460
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4632
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:604
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1512
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3400
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2200
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1760
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1316
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1972
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3752
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3532
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1120
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1220
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2416
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3728
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4808
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4676
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2908
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1008
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3584
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3980
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:5028
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4988
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1964
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:964
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:844
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4536
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3412
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1104
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3472
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3624
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1392
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2820
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2796
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1100
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:516
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3788
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3952
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2120
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2296
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4728
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4420
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3588
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3128
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2240
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4024
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2780
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:1224
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4508
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4928
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4800
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:3548
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2600
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4296
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:4468
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2300
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:1696
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4852
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:2508
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:2912
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:3368
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "powershell Get-Clipboard"
  2⤵
  PID:4944
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell Get-Clipboard
    3⤵
    PID:224

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log

Filesize
3KB

MD5
3de7dfd15c46f7130d4fc1fa4770b295

SHA1
b677f2c050b0846f0b646a2dd3c3bf2e71bbcf02

SHA256
2b4f720648bd3c70c150286a116c66aa42bede7e9d0e8f160761bb3dc0bdf9e9

SHA512
b71a3cc929ec5769e5468b6b66d986a2d96c660b2e7073fc9ae6d2ca4e777d980fda1e69f9937bc77171c79090275fc7f5e0deaa7a13729bd00973f179127acb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
9ac62702b87c645e9434613ae0dfcd6a

SHA1
ad6b1806231396b6a6218d9b6a0136821d86c159

SHA256
73aebe9d802f848fc6b3a1a970a09d34e8dafdec9adddbaefc4c8858d6378fa1

SHA512
f97067fe9814897c2e9deb68178bccc53f9a77de322251e9f310e8f97d3881778e4a8d4fdcff0f0b7271abe1ac72b8714dd3ef69e6e7605a64d1cf7d46719160

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
47d505941898e8e0ec67ccbe6577a639

SHA1
8ed8f1bcafbea33014d0622d699cdc247ee03d13

SHA256
4a7393dfe3991a2885f090fb3462e37793c35487a5eb2b47fa35f4f9c2279560

SHA512
a1bb9f6da61cf8263348e3599a22445e5a543d9a85a73507cafc28da54fde3ba3a51c5c63b0f9082ad78b9f255b44beb7111ff0a4ebb38f0f71be544a9fa12a3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
5af8f60909432659f02dd9afa0bbcded

SHA1
22682b44a52c091076a4c65afdf0f6d24ec11fc4

SHA256
88cbefc1d8e944a417b892ac8eafa5ed812bd9ee885fa03c4fa18480d5c2a720

SHA512
5d3bf79a7a88a17524de9c0a5fc60e75536d115a2d4a88dc35e5ff43f85ec0b6beab3cfb25e3031d6bef1a0c73a093b192519bd8689cfbf461fd6cfb5f1b7c03

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
5dc136eef885a5aff8515e198c8ae1fd

SHA1
07c8aa7e458203ae41c5d5a4622925332b65f3ad

SHA256
430bc29a55840fd6256bc84d32831f8f3860fdf0e885543097a3d2af23a23990

SHA512
597232cf6bbf7d5f21939dc4f79aba93e218ec5334132d254f70cd30fe92aba8663e3c5abe3babcc2611bf222d08aa1bf40b376e9cbc7c86035e16e79dab3c65

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
65258bf4518b777565e7b51a16b6117c

SHA1
bda9b1212a8a03f4ca271b014f539701610d3102

SHA256
3dd180a3e67ba1bc7461affb2aeb9059b8e173d36a1a9460424a239f0a0443e0

SHA512
f4c24e36f81614ba93b0256dd937664abc6765b0e7922b4bb34c594c8c61f29e12fe5b1ae55b49b2e2d50bd3761e4851152f757f03446a4f9ff269b41d129d1b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
b4295e1669cc85a601c276ba398787bd

SHA1
13b554c35a55adfb73072df0b6e15829930ea638

SHA256
3f6d17480592fe0d8ae07a0e5d1d78f7e8d5824375441cc2269638cb2abee5c9

SHA512
6ec720544c9d0586c19fce6b9960d2f2e73b800646cde92f5478d3e7bd990599486c3b4cd698462f0c135b99db74a85a3270f1888072d6ea7fce096f3805af3a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
cf002d856f03fd2aaa847876582d6bf3

SHA1
9f6fba8ecda88df7df3fb31d2366a6d15a159432

SHA256
722063c44cf16ec18266ea08942d15b915679b35a9edd17f11143092a574d96f

SHA512
2b007aca8b71e12398ee57358d9bede95c574fff262bc62cccd3473f30158fa0f6bdcbd277c87bc4c153f8d88098502e08e61b3c952480d06549ed9f5ef9997d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
3ddc743618ef68442be5b8accf5c3014

SHA1
19b74dd7a717d3bad26046658f344eb053d9beab

SHA256
b9a642be5b2e325db47bd67118992fb2aa687b9a80c6ac92aa5080d041fdb0a1

SHA512
18d32d1bfd2f4fca00dd95e736346d6b098c62bb895cfb92e0ac7a04887d55e5099fbeb3ae73ca74732e4eff516a6dec7bf7dc6745e0089ad71131c1aa282e6f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
4e627819ff27da44bb238905cc46294c

SHA1
a6cedbc652964fabdb2515e3dd7c7297d48e2c93

SHA256
68938b6c1b018a63fd867840b548eba0b477c4d61d754c5235066a4370f97725

SHA512
97d202fb04d823ca9fe7e1b22880f7e4a2a0aaac4682a64d6a5c9d4a49869c9de9c9dd0ce6e63e6d228ba8f8dea515faf4dd36128e9cbd97127bcc25b0721c8c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
fa339bb85eb82fc5fc00959eb4207289

SHA1
5acedd0f9f07ac161883f2d46f30dd7679a24974

SHA256
b5009444003de5ea9809e0532ad6d446249aeec8652b02d8b982fd746b2be342

SHA512
78e292baa8893e882eebd69a0592c2e68f628318cff89326e9b8be643f8c6855e19765d142d749bed7815d04d418538e38bb261629afc863be99bafd29808cc8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
8bf743c7096052edec237278e942071d

SHA1
f409db166b673a5c41d92229160d1c6f898fa9e5

SHA256
7073b8282e0e5a64bbcab036a7f4f28ca67447580e79aa506ff4c8d6fe9dde14

SHA512
08733485fb9fb92016fc614f0e053115611e158ce5f5ecd0df73b0bcfc1cc55bde57b894fb57f4bb254e8328283223108304325a44941e985246a8c79c63c2af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
d92e78c10336ac05e8e48d11791a5173

SHA1
afff735f0e4a523a889d3245f592826809a9b3a6

SHA256
8e8d5617f4e81958a17acf11cf0a3d2002d778eab47fff3155aed11e9a6b0448

SHA512
6408897dee5f769f3305b37f4b66d5e8aa04548380ae9f505bc954cd2dc1238cb97fddf9d71231d039af95d8d2d5a6f814dfb9d147660b203abe8dbe3865b697

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
3dc8d71723f03d3597897287d7dc723f

SHA1
17aa735ada91b1214fbab4e339d25274187b29ba

SHA256
e9fda0998fd598df27b370a4e9a86e87282a4e0ec1f5815696c288ce62ce7280

SHA512
11a97f1eef43f4aa7ac5b937cab73f6cf7f97952ca4346624066bf5e86c6969d13bd2a9ee7bda6a47bda39aad7bb5cdcfa13dc6fdf08011a27e7595ec6b11c6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
4074ace122f56f4e55e6fa82427220a0

SHA1
80b8444b592fa50f4fcdb3f45eab5b35a687ed94

SHA256
95dfb553aa83c251f32f6311bd7ca97f77a86f6c01283d9e41e53b38337f924a

SHA512
6a046fa14f77f22f95b5dee02d648ad70205484e911c655af470e36b078d7b32f821383707ff8d86e7facc038f06e84601d1ef50aeb41db565a1e603856c1222

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
5dc136eef885a5aff8515e198c8ae1fd

SHA1
07c8aa7e458203ae41c5d5a4622925332b65f3ad

SHA256
430bc29a55840fd6256bc84d32831f8f3860fdf0e885543097a3d2af23a23990

SHA512
597232cf6bbf7d5f21939dc4f79aba93e218ec5334132d254f70cd30fe92aba8663e3c5abe3babcc2611bf222d08aa1bf40b376e9cbc7c86035e16e79dab3c65

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
ef0fb0aadf321f52aef6a8f8aaced1d5

SHA1
83ca1fa21270a72df8300fc6870e94a5f99a19e8

SHA256
e8ec7f22d65d561e1b1fbe41dac1d7f9aeb6645f7dc503ddb4f11c53c66b76bc

SHA512
a18275c5d5e8d5076e9831c6057dfeea7f330d7c5ac88aeeb081961dd9d4ca2c95f117b48c22dc74decbc8688c647c67d337f3386f489717df85b0369313e8bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
1179c39015833a383ed5e91ce19fc7ae

SHA1
9c7c4512aa65c4d49e4ac17709dcf9738a96a364

SHA256
fee18efd092521cfa8a2e44d98675080724f88c1e6c1ecf7c877c7b2e0406581

SHA512
bb67f93a3482add07fa3caa6ba1c93763e452a851c3ec76e9c4f62c9052d1543ee5611f4175c512410782a6dec4f2487462614f7c77e6829270a743ae6f55e5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
8cc672b08ba9310731f699405b40b259

SHA1
0c059904de933dbe409d8855fb99b438bd974a54

SHA256
6adef048da4d47470ddbca79290dfbf763135ca347dca4c2c4ca2b5439fd3b61

SHA512
2e5a0c888f8d29e050e75181613cc6e718a533078424bc839d44237569e9a6f55eaceb47fc0b8becb28d30ee870484b32a397e84949ca114f84d81ee28c8ce16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
3dc8d71723f03d3597897287d7dc723f

SHA1
17aa735ada91b1214fbab4e339d25274187b29ba

SHA256
e9fda0998fd598df27b370a4e9a86e87282a4e0ec1f5815696c288ce62ce7280

SHA512
11a97f1eef43f4aa7ac5b937cab73f6cf7f97952ca4346624066bf5e86c6969d13bd2a9ee7bda6a47bda39aad7bb5cdcfa13dc6fdf08011a27e7595ec6b11c6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
cb28984b98ef32851953569ab6ead021

SHA1
c4cc6e3337b23cea8b635dc0248e8afa7b39bdee

SHA256
ad878fef21a7d806814cfe51ab3abe0abc3c93d45a7404408ee70bf65caaa263

SHA512
76c63a397305a4d498c47d4d286fe9c9c5707efa1323289998ea88956df58f135f744396b514280115a83b757767c17152757485c6eb7b14af8c63f822ba1d2f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
947c2a3b647bb40c0cea36156f6cc966

SHA1
6f2898ca73b70cb22b5f8c4746d5008a9e842324

SHA256
8d175777d3f20d244aea702489a665177ec6c442455da05a03cd2844eb953c5b

SHA512
76590697e5d98136342c8c5a8becaae871f79760107da761ceec25636d6d3da2c358591616f612e67e0be23624af42c848ea4d299f151b76c2c2c99847c92b99

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
ac48b8a3d88d61d95ca6e5c29f3f0d6f

SHA1
bc07b59872ce89a5d6319ddf15e0c5410588709b

SHA256
52cee010438e3c4ba61a75f0c7495d6e4df7cdcf3e17d6391960e8632c57ef7e

SHA512
1620794b005baa94fa28ae91ce5f872c4450917ce1df972996e19c181bcfba73d31c5e5634a6751ef2cd8805fed1e6b569e9b5775df89b9661a1bd31d9195015

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
cc952ab61013cbc3af6d7cea1cadda92

SHA1
ce0a268ca378f6a4ec8ca2a00ad113be644958ba

SHA256
620e8cb5832a82138af3ec1a5629986c3fa8e69cb258a1b7085999991b0db86d

SHA512
9f23cb89c3fdfcd84daef21692b4d3a4f4f8603dd2405af5351a01586174b9112efa4fd2a7551cd04c23104972abff06e6d041934d763bfe59c54e46bcff807d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
8b301969f4a7bd595e0241d95e8acddc

SHA1
07e3097ac45aaf1437172b1458e5481762ce4a97

SHA256
3e75fc6d10f410ed17c0611cdfcc23d11a079a4c95d9d06b89b08f3f8bba23ca

SHA512
ffb8a38d7a7e85b2830540218898fb93855f695d85eb97857b55731f0f5237ef7809ccc02c7e7edb73e4fe5371a6f82592c71232ad19dd4f914207029c750e6c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
a470ce9bc97b993cdbade8ed4f34a2e8

SHA1
c52f54ee0ef9f78c2c0e92b81cc37907588dfa98

SHA256
72029bb1e3f7f1b11f1f3541a73aa8390a8bc78c5b4e62cf47cc01f8f999542d

SHA512
3647a40b792931c741cf31c2d7e09c6191e52c6240848c9d4dcbb05ac76e82ccffe458cb36fc12e4fa9cf259c3d45ccb39dad990e5eec4e0f4c62a4112cda89a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
09e3ad4be65b117fbb6b14ceb7db5be7

SHA1
cdd1681418ee13dbf553985a5da4957ff7145f29

SHA256
79ff5816a549f0d548070e9d6f6548fed516537f1d71e12122e5c06af81021fc

SHA512
7e7907168d3fc736df04b04b994f6e311ebcd18e9948ae9808206ca5fb90192f785545042f864ddd4fd2aa483e21ab09a00d03daae0786cea039f1bb8496f540

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
eb2556d8318f645f623d32770e0dde00

SHA1
31f90ff5adf78f9fc239c79752a5facb0e1ba59e

SHA256
f7854cd4413af38826f371eda77f974a80e6a153664c0b8fcd394daa2ac98f22

SHA512
6c3b3abe8e5407408640dcd1c31f8bc24dc0188f87a364f9a584b2c80b464ec80d3f7fe509fce20bc0b4a00caad2a1003e23385cebc51b8a34566ac31630b2e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
b02885330560d823c0c516d31b961a44

SHA1
b308668c74c01bf6e5b9bf8b169f394190a704d7

SHA256
a6416737cfa2e5f801e104785e06de4df901bc7d768076c7285fd4376cb7b391

SHA512
501cf5d3a36c48c84c85d8716883eb1efe116fc03e91b91a01c7fbb3bb65ed280c8d658d1c888fb900e2871ef4cd70cf59c09c6f70504b6e3534691fa01cdc0a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
7dbbdbe9869fcb6f34dd33d409d2ba90

SHA1
b8cf7db3202dacbf2fb1626980de9d2674f3209e

SHA256
3a4b8385c52d5635cd3f72928bb33faaf50f45bf1fcc81c458e0ad3086d1efaa

SHA512
515a1141f4e414dbf0079d31dfdd8a0dd7cca7bac5ab86422cc4c90b0fb48c84a863f8ab7170346af8b3c4b11609907068e547ac4e8b58ec0139027847dee289

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
dde285b2db6c181cba99e41d2deb8f0a

SHA1
d06d98ce996502b20f532b253d261282aebc03ad

SHA256
c7d64a1430d7d2efa50b41a257ea81c89828999c361ab0af9c1c4f1b7ff1385b

SHA512
9ce6503646504bff0a5881e5c9936949654e7b7e3f0a6fe9dd09e369ee93771b2a645d9e7c29fe90398b61f121aa85055630516807cd9048fdf5f982d211c2e6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
4eccb43639bde8ee3395e6605ed061d9

SHA1
0a4fb25913ea645b56533d60fc6a3525f907f888

SHA256
16a6501da251d825a21801b7ccf1dd2825731e21b2ac6d88e7f0f8d7d40b104b

SHA512
8e15918e13cb5d0711128efcf6cccef406a9cf85679a4513075d06df4b9a8fdb6a2005d4bd439539b03e6924570860b1b15b65e0784832254f5c2c6b203f4ab4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
cdbeb36fa62daffcc191dcd50a5e4571

SHA1
90887478cbdacfcecbc1291c6885b7997032c5d5

SHA256
d94fc5ac3ee26fb13e8b0f9a1da52de2bad40c8e90579a7fd8062aafcae9872c

SHA512
0f87f6e36eecbe9e6ad96d8c4f75a25cc216fd3a68541a6750dcd195f2811d55356deecc7e8cb33ef3da720b5e97cd9367306969057b36851cd4f5885c90d81d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
6a61f4069185e2b1bc1fc0d4e0a197d1

SHA1
1bbc839598c0aa1231265318d69c16636c6cef8b

SHA256
d400432448f305762148322cd213653be0ca439f0a92f428d2d265bceec9a880

SHA512
0d9b0a07fc89b23c1c3203939bee0a3eec2fd2c0330d26cd36bda95b9a583488aa20bb2f98c6a61286baf892dab3a688db262ee658c76a0593f5cd19a4d72154

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
10d4113280c13859a9b71ca47d4d9f4c

SHA1
633748e0ec078bffa5cfa15ddb9dd68282235c38

SHA256
b035bdfece6dd90a54ed9e3071655a3b395583038ce2eff172bd4c2682dbeef4

SHA512
aeb6c89c6d13a1c48440e2929131ab5e2692b9009627a71ddb276cf638427d8624866cbfc8ca330bb68bab77faafc2ec01b48685d3eb4cd2514b7f2fd4256c1c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
6f6197e37ed1cb2732eab0b88984b982

SHA1
22ca39097a083df5eac06cb19172cb390ed205ad

SHA256
caf7ba0ed947c7d08ccc43fdc5a1fa3e2a246c1fa94c254fb98cea039186c115

SHA512
7b32a74e7c044db77f7a8d81a0360be9b9fc30ecf87c726e0342938f395dbb0426f44a27dfaeb80645f6671c8a7bad8a90b3ccf82cb2bf6cd756f18f78a6c846

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
cdbeb36fa62daffcc191dcd50a5e4571

SHA1
90887478cbdacfcecbc1291c6885b7997032c5d5

SHA256
d94fc5ac3ee26fb13e8b0f9a1da52de2bad40c8e90579a7fd8062aafcae9872c

SHA512
0f87f6e36eecbe9e6ad96d8c4f75a25cc216fd3a68541a6750dcd195f2811d55356deecc7e8cb33ef3da720b5e97cd9367306969057b36851cd4f5885c90d81d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
fa2cc984cf4ca9762319028b703a46e5

SHA1
f9c01decf8da461520611d1bdedea9b1bec8ada7

SHA256
e997ea6bcbc8093d05bf70c651b03c1db3b47149e4bb027aeea553d97a8d45dd

SHA512
44f9b6d29cb2fc9bf0518efdd0ec2cf0ab98158f7d8e85acbf34989c9842c6942d5939cac9a634ae5cd0930eff8ecf4288946972ab13bba2d9659a96f8d537b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
9f04bf083907d1b6f5e5338c0472744f

SHA1
291ec65177c168da737600d64df191aef88f88cc

SHA256
17a2aabce491b7142022295f0fca6daef770d355fd83d5c2cd900f5e5e54cb23

SHA512
d791681724545afd27cdd465cd6b9705efd7f57d48c6a60aaba07924d109ebee9a1d9139ddad0996865410056f77cfdea0343b779f04b862ac11d2ce0a2ac4d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
ac48b8a3d88d61d95ca6e5c29f3f0d6f

SHA1
bc07b59872ce89a5d6319ddf15e0c5410588709b

SHA256
52cee010438e3c4ba61a75f0c7495d6e4df7cdcf3e17d6391960e8632c57ef7e

SHA512
1620794b005baa94fa28ae91ce5f872c4450917ce1df972996e19c181bcfba73d31c5e5634a6751ef2cd8805fed1e6b569e9b5775df89b9661a1bd31d9195015

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
9b6902d4e18a5f4e9d4d5beea39ae9e8

SHA1
43a767c69a0e9c19411f2e5b81d4d1efd40270a7

SHA256
ee091f9cd9ed3f3ec1cb4236952366307df540ed10e82a5f959dc69eb2aeeefa

SHA512
744f3c0ea7d4f66aeb1de807fc9eb831a8326f5da161b8eece5ae71a38bf178c12fb7e4864b11c772b278d9065a5fedf4b0122c00bc9b3504dac2a4059e0725e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
df81275cd26fd41150b42446256f1af1

SHA1
e378cf0606d61ebcfa08fda0b0f5edaa2e798a12

SHA256
8287bbb8bb056c3453743e36f516870d67b3ae85a83dbc51c539631e43673745

SHA512
f68f743637beb008e045cb2bb29a1ba7566070ea8fe16139b440e79b671022154985416fad9914dbea39b9d238315496205654e2919fab663c0e4f72406aa0e5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
1d43a7689402a7168d7ed3a865e4660a

SHA1
202e254e278dcf483fa5b96318ba8227396106ce

SHA256
93cfc079569ff6fbeb0563215368e8fa8e6d1297b24bf94b050c2c704db52b02

SHA512
c185290c19f9e3cdaeb316ac8b6c627d19b9efad5d187e030063afb5cc12bfa1624b84b3e15ec54d82725972a3031659cd2414568e6d04743de44bc16c99d2c7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
736209d21f89dcee559fec7ea096b4d3

SHA1
7ffdcea306f827b95c89d35908758f9eb7d78b20

SHA256
6adc17ea2f469cc5d42c3a2451da8170b0d42653d56653d905a66973592b209a

SHA512
f7e72c0cb5d85680194457da3d9082eebbe91323a3c7e7c8ed845b05426db910fd4b07069be2cde4f5e92736669c0b9c0b01dda5c35430fbc557c5365ab737ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
f4fc1e06e74f9a4977286fbf42a24a06

SHA1
c30f9f28971df69db40529744f66f15d7743858d

SHA256
d68da5420187354e17eb86e9e8d419c595d28556a80054c55ab7630622e32744

SHA512
5db9370e4f3e0a9f171307cf0d38d71fb2cad7c14da10e95db34a1515d19c0c2a1aa3518f079f85554db5856a7598f5e58d59345c60aefa265c899ffb087ce0b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
31047f58a598f3a174161c6c57dbbb36

SHA1
9db9c3c2e0b76f6392cc6e47041dedcd4dd37c55

SHA256
114b2af97ea5f59413fb51c1b74296d9d5fc3f641f936fee0af7dd5b1eaae688

SHA512
14cfbee299a05607e41c5c4a5267209d921f1a144eee9cf6e8170ee1df56211b307c4170ae77028e5ace9575ddc4e977efdb1ada9ee4779e8d1d1c389cfe62e7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
fe81d8f1a951b319d01d3803c967b65e

SHA1
0083b53e90c09576fe362dc3b230c229c9d853c5

SHA256
5356523367b864a58d78af46d48241b2c870985b27a793effaa2e13ce8c812b8

SHA512
40335d75c17adc522199f67df8b97387cd3503ae4b5525825e61889fbef590b9d8235e811e088628c290811f2d91b6474428288813de824cd780bb614d8a04f1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
508ce40031605bae7ed7d0b4fe60278b

SHA1
c4d636d3be1f4eed3049b25a2126260c019acadb

SHA256
ae0364c614467009841095751428ab1e1ea83ed046ecdfdb1929d20013d221d5

SHA512
d5a97931e49f1145335bd8274276f3ede9146dd4c155590b95de7757be9edca81d0bb9f9eef344815c7839369698590d55e931389c48445fb399cc3881c6d6f5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
eddaf0503c1baeb507e8de0657911a20

SHA1
7c832d70c062933355abae9e34e5d8a69cf1d8e3

SHA256
14e412eb36e995e00568c777d3587ff405f98c3efb33dfbd9653a4f38289d438

SHA512
653d632516f748f292689778ad3d12e9ad7b4c7e99516449aaa3b981da7c6469627c30b3f8c6b7acf4f7a4c99097016f6391a051315840f28611e82ba08b1561

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
b02885330560d823c0c516d31b961a44

SHA1
b308668c74c01bf6e5b9bf8b169f394190a704d7

SHA256
a6416737cfa2e5f801e104785e06de4df901bc7d768076c7285fd4376cb7b391

SHA512
501cf5d3a36c48c84c85d8716883eb1efe116fc03e91b91a01c7fbb3bb65ed280c8d658d1c888fb900e2871ef4cd70cf59c09c6f70504b6e3534691fa01cdc0a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
b2a8a02ac19dd8e0e7e2a14c301576cf

SHA1
a94413a33f87e4dd9ebd15e1be8e6f17b7460416

SHA256
56538783677eadfe8dc1e74f397b33de5b0276f266b175078d62604e06e1ce74

SHA512
c8249b22fef0b44ffc61fd56e6d3d674725ca6609d22495259523a6a47f6dd7e2b18865e1c13b386a0de5ad1a7ff0b4d25f17eeaa7ed18fdbda10100094c6300

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
46fdb4e6480e38cf5d05f2dd5d1c06c4

SHA1
773c8ad59c404c1af78d6c4cb613556d41dabe80

SHA256
fd566bfb19d27f6e1ae67326a7c488afe68b5360b97f660697ba6486d7e4e55a

SHA512
68222306dbae96a363cf6e83b9b68bfcd895cc46b3f3b9ad516100666969485645a9230337c85ccebb9d1e56da5ac0b6d19482f88de48cedffc82f1fc3ee26d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
3babc3cdddb647d9fbc8727d8e4b69c0

SHA1
126a41b30d38beab59ec6592371121cef2b0b7dd

SHA256
df220c69f78602582607873b000ee69abf4b08d9a9914e720d909aee291fbb47

SHA512
56eadc4447fcd27298702cb0d0efd8382a405be44252f4e93b4324a9f17bfcf713cf6a4a81048b3a29bf463e56619cdbd8f4ded9c5334ab809920f2d3fee062e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
66b184367171365aa5d442a01ba2ebe1

SHA1
cc4298ca734500a5fa6c8baa7c90b8ea6771e999

SHA256
d0a0fe5e62064da25c9a6f08a74a31624497af5b41d6b9bc307983c948bb233e

SHA512
d536b7eb8c1f5c97b4ac7ab1113222068c50669d321385d41810ec6fa56d3cdc3954d51670f1b410e1d02afc9942e14c4b540bfd4f5116f6b419b1e84e28cdbc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
e8dd6fa6f12faafe01ddf02cdb65012e

SHA1
9bee632da3f607ea4a7fcc05eb9187cf95308a44

SHA256
53781c7ae44f322cb7f30a4a69ec2e8d3d01cef540259e7dd9cb7716a9cb881d

SHA512
060bc428d2855de315d13d998fe5a9e91ca95082398ce1524d95a4de8453eea7eeede17685889a6ce48589982780f4ab4572132703869ae1f86550c8213c5379

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
f62273151755643a4cdb286a933b81a2

SHA1
a9fc22295b5bac1dcb5de9de63cb4cd42dabf05a

SHA256
8061ee983bfd2a58b0f710a1b9fc1449d9478fb16496eec993710271b2c28e36

SHA512
688eec580aa99c0375b6ef319b194ad67b97fa2099f4927f1797d977b1e063df90630f04f1f56ba4c4a03fd8193de99780549e11e98ca031c4bbf7e4103a67c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
f9af08b47d2e50ad38a7e81c56ad5482

SHA1
ca5ea5a837faf08f5e437d6bbdb114fee838d4b5

SHA256
a0f87282fcf91f50b75ce50e44ceea76222765997630402ad91c1cbdaf644c8c

SHA512
c61c17fba0f89d19a86ef8ac159bb74b2e7132d6a659f87c7b1e13b886538665801e857c9158fb61d1c611e51494b466eb36d8eff8c6e032820dfb275ac75114

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
bcee2ebe8946e07f5ba4f508d26aec37

SHA1
62624e504ada12970c5dfdf12ebd8e29c8599252

SHA256
c5e581a974b267045709743e34b9014499e98b1fcbc46a39d266cceb2129161f

SHA512
724cd49a680652899fdb087adfa520a57cb311aad7a99c6467ba71c5f682c3beef2903c76a5abb4287ddb072c79ecf809cb58279400b7a626649564f03cb407f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
3babc3cdddb647d9fbc8727d8e4b69c0

SHA1
126a41b30d38beab59ec6592371121cef2b0b7dd

SHA256
df220c69f78602582607873b000ee69abf4b08d9a9914e720d909aee291fbb47

SHA512
56eadc4447fcd27298702cb0d0efd8382a405be44252f4e93b4324a9f17bfcf713cf6a4a81048b3a29bf463e56619cdbd8f4ded9c5334ab809920f2d3fee062e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
56ed332e05ac51868d88ca824c2b8020

SHA1
e0c247f9b3b7889703a59a89e1cac70862c1c5b5

SHA256
750231e9bd81cea1d856e42bc3c5c8e05826a6c494780e32be3a6862d80d1b10

SHA512
44626dd45cd77f5d51bca26a99b90aeec5bdab3e1e19cc934c21722ca4d7379e778c70309e1bd288451d05d27e621a059dd8473ab51d8dd067e09da9e564958b

Download Submit
C:\Users\Admin\AppData\Local\Programs\Setup_\D3DCompiler_47.dll

Filesize
4.3MB

MD5
7641e39b7da4077084d2afe7c31032e0

SHA1
2256644f69435ff2fee76deb04d918083960d1eb

SHA256
44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

SHA512
8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5

Download Submit
C:\Users\Admin\AppData\Local\Programs\Setup_\Setup_.exe

Filesize
130.0MB

MD5
34d937a65331dc76244a05ca82bbb598

SHA1
85f62a5576dc4877eca26eb6b0e2b25a32b8c894

SHA256
c002573ea8950fb4938a404cb56a4a2cb6b6b0015f8c01397108b40af1cc9828

SHA512
1d99aa596de1a156c3e51b3ef68b987278ee1d4a1bb1344cfadf6a5367879f6f6a2d635900e89b56c1c294d37c06e8712ebb131cab22415d40477174ba3ffa87

Download Submit
C:\Users\Admin\AppData\Local\Programs\Setup_\Setup_.exe

Filesize
130.0MB

MD5
34d937a65331dc76244a05ca82bbb598

SHA1
85f62a5576dc4877eca26eb6b0e2b25a32b8c894

SHA256
c002573ea8950fb4938a404cb56a4a2cb6b6b0015f8c01397108b40af1cc9828

SHA512
1d99aa596de1a156c3e51b3ef68b987278ee1d4a1bb1344cfadf6a5367879f6f6a2d635900e89b56c1c294d37c06e8712ebb131cab22415d40477174ba3ffa87

Download Submit
C:\Users\Admin\AppData\Local\Programs\Setup_\Setup_.exe

Filesize
130.0MB

MD5
34d937a65331dc76244a05ca82bbb598

SHA1
85f62a5576dc4877eca26eb6b0e2b25a32b8c894

SHA256
c002573ea8950fb4938a404cb56a4a2cb6b6b0015f8c01397108b40af1cc9828

SHA512
1d99aa596de1a156c3e51b3ef68b987278ee1d4a1bb1344cfadf6a5367879f6f6a2d635900e89b56c1c294d37c06e8712ebb131cab22415d40477174ba3ffa87

Download Submit
C:\Users\Admin\AppData\Local\Programs\Setup_\Setup_.exe

Filesize
130.0MB

MD5
34d937a65331dc76244a05ca82bbb598

SHA1
85f62a5576dc4877eca26eb6b0e2b25a32b8c894

SHA256
c002573ea8950fb4938a404cb56a4a2cb6b6b0015f8c01397108b40af1cc9828

SHA512
1d99aa596de1a156c3e51b3ef68b987278ee1d4a1bb1344cfadf6a5367879f6f6a2d635900e89b56c1c294d37c06e8712ebb131cab22415d40477174ba3ffa87

Download Submit
C:\Users\Admin\AppData\Local\Programs\Setup_\Setup_.exe

Filesize
130.0MB

MD5
34d937a65331dc76244a05ca82bbb598

SHA1
85f62a5576dc4877eca26eb6b0e2b25a32b8c894

SHA256
c002573ea8950fb4938a404cb56a4a2cb6b6b0015f8c01397108b40af1cc9828

SHA512
1d99aa596de1a156c3e51b3ef68b987278ee1d4a1bb1344cfadf6a5367879f6f6a2d635900e89b56c1c294d37c06e8712ebb131cab22415d40477174ba3ffa87

Download Submit
C:\Users\Admin\AppData\Local\Programs\Setup_\chrome_100_percent.pak

Filesize
138KB

MD5
03aaa4f8525ba4b3e30d2a02cb40ab7a

SHA1
dd9ae5f8b56d317c71d0a0a738f5d4a320a02085

SHA256
c3f131faeefab4f506bf61c4b7752a6481f320429731d758ef5413a2f71441f7

SHA512
c89a1b89b669602ba7c8bf2c004755cac7320189603fecb4f4c5cf7a36db72da651c7b613607146f0c6da9eec5df412c7fba75475352192351c02aebdaa7d9a9

Download Submit
C:\Users\Admin\AppData\Local\Programs\Setup_\chrome_100_percent.pak

Filesize
138KB

MD5
03aaa4f8525ba4b3e30d2a02cb40ab7a

SHA1
dd9ae5f8b56d317c71d0a0a738f5d4a320a02085

SHA256
c3f131faeefab4f506bf61c4b7752a6481f320429731d758ef5413a2f71441f7

SHA512
c89a1b89b669602ba7c8bf2c004755cac7320189603fecb4f4c5cf7a36db72da651c7b613607146f0c6da9eec5df412c7fba75475352192351c02aebdaa7d9a9

Download Submit
C:\Users\Admin\AppData\Local\Programs\Setup_\chrome_200_percent.pak

Filesize
202KB

MD5
7d4f330a5443eadf32e041c63e7e70ad

SHA1
26ce6fb98c0f28f508d7b88cf94a442b81e80c88

SHA256
b8704be578e7396ee3f2188d0c87d0ede5c5702e9bb8c841b5f8d458abf1356d

SHA512
f1b9b0dd7396863aa0feca06175b7f9ea0be4122351ecf0a0549ee4c34f85ac8c63cc927d7409a40b6e19fa91d2cb00a145616ba19f47045b2345bfbc2d4802d

Download Submit
C:\Users\Admin\AppData\Local\Programs\Setup_\ffmpeg.dll

Filesize
2.6MB

MD5
6e8ff0c1204825a0427f568a0af0bbd8

SHA1
fac43d02e0f24e92e5bd9faa5050523469486565

SHA256
61a65e313a8ec1416ca57a778f440a502041a7286252e9fe52a8df0cf0e021ad

SHA512
5b866de52b22b6dd3e25b60de71ac2675b274485dc4bfc0a1e0b90e12b6b7c0e57350740bce30f57c3fff323ac8eab1ce38e4cc5c4526a3d0b6c28f1beae4034

Download Submit
C:\Users\Admin\AppData\Local\Programs\Setup_\icudtl.dat

Filesize
9.9MB

MD5
80a7528515595d8b0bf99a477a7eff0d

SHA1
fde9a195fc5a6a23ec82b8594f958cfcf3159437

SHA256
6e0b6b0d9e14c905f2278dbf25b7bb58cc0622b7680e3b6ff617a1d42348736b

SHA512
c8df47a00f7b2472d272a26b3600b7e82be7ca22526d6453901ff06370b3abb66328655868db9d4e0a11dcba02e3788cc4883261fd9a7d3e521577dde1b88459

Download Submit
C:\Users\Admin\AppData\Local\Programs\Setup_\libegl.dll

Filesize
429KB

MD5
dd89d4e2e2f87a0408f71324b1b12bf6

SHA1
d2cddb78e1e3c9f3806410fa4599a115c0981c12

SHA256
9727aa72f942760d6608d41ef41ca1a9351a57b1609795ba25abb61da6486855

SHA512
1d0ee8fb90b3fb2181919962ec2cbe709308eff9e3671350e5fd7ff72262f46e02572f206eb6c54408cdbe80c86eade6b77d8538f0b131e9501fe30c7afa11f8

Download Submit
C:\Users\Admin\AppData\Local\Programs\Setup_\libglesv2.dll

Filesize
7.6MB

MD5
2a4b48bb231427441c0f044fd2452f87

SHA1
195f1442aeaefccc38b19873f6a98fad3500963a

SHA256
213ab083b6b7b6ee8a1cb2786d0cf5af6d65aba34d4e8f3a63dc153f06fd1ffc

SHA512
7a5ffcad4ffb8f08543291b9adf8d29628df361a73a79abaf0befe2201c39b04a217c1627d6e9e34357ffffc3495960c1f5fbddb421468ec6c645cbb248a0d99

Download Submit
C:\Users\Admin\AppData\Local\Programs\Setup_\locales\en-US.pak

Filesize
88KB

MD5
af5c77e1d94dc4f772cb641bd310bc87

SHA1
0ceeb456e2601e22d873250bcc713bab573f2247

SHA256
781ef5aa8dce072a3e7732f39a7e991c497c70bfaec2264369d0d790ab7660a4

SHA512
8c3217b7d9b529d00785c7a1b2417a3297c234dec8383709c89c7ff9296f8ed4e9e6184e4304838edc5b4da9c9c3fe329b792c462e48b7175250ea3ea3acc70c

Download Submit
C:\Users\Admin\AppData\Local\Programs\Setup_\resources.pak

Filesize
4.9MB

MD5
91f8a4b158df6967163ccbbe765e095a

SHA1
95db67f0a2352fd898f4a4cfdfc860f6a9c58c87

SHA256
a30b8269e588c6cc2cea5fd4685da3012fd10451edb59a283005116f8e033182

SHA512
6450d75d53f24d11e1c1e7e3cacfc57ee9dd09c00ca0dc2ff30f580b59a6b17e7ad7d96682195bd7d806b49068653538c77ca4200491560cecff128a0b012d92

Download Submit
C:\Users\Admin\AppData\Local\Programs\Setup_\resources\app.asar

Filesize
53.6MB

MD5
a409b93ae59630084ef56912c1c479d0

SHA1
3b8f00f1b1a92f933fa08cf147177ea6ab1e9db3

SHA256
09160ebbc3d6fc22fd879cc2aa4b5feba128280ae0d7d2b42f8ddac47dd88ff6

SHA512
20566256c710fe31a6ad4dcfa46e64bba4416398481ac3fc4ec1e2abc05b6588919e5a3a2ba53ec92fda72bfbfc2d24cd506ee4c27ed86466452c806ebc05a58

Download Submit
C:\Users\Admin\AppData\Local\Programs\Setup_\v8_context_snapshot.bin

Filesize
161KB

MD5
40ecd5d3ad7c60724875be1c2f339903

SHA1
369c8f80f9c1085ad8911dacf1b2af1533122732

SHA256
49889b42d7a5b829a5af73fa8f4e4eea37ae913ad353bafb7445170e7aedf961

SHA512
649eba643dac9779145c035efeac823893da813a46a5af08e0ded301390443e97168ac7ec7db497b2f940c1e2024eee21519e0f3909650aa5fb560b3d800a8ba

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_qsjvhc2l.jey.ps1

Filesize
1B

MD5
c4ca4238a0b923820dcc509a6f75849b

SHA1
356a192b7913b04c54574d18c28d46e6395428ab

SHA256
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

SHA512
4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\LICENSE.electron.txt

Filesize
1KB

MD5
4d42118d35941e0f664dddbd83f633c5

SHA1
2b21ec5f20fe961d15f2b58efb1368e66d202e5c

SHA256
5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

SHA512
3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\LICENSES.chromium.html

Filesize
5.1MB

MD5
6b84319ee8a0a0af690273d3d2dcbaf4

SHA1
857ca353e0582d100dcbc6cb6761bb4430d0cb90

SHA256
fc2a256467fb4d4ff72be6c423e5961e98b418554deeec296aded0e757b9a585

SHA512
26f9842bfdb429ef132cc1a930da9187071a339927eda402e8d54b5eb9e03067612cdadc3a2dad3d0977f8e6af18c05eab6ac91720221c6a0104f96638f85a8a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\Setup_.exe

Filesize
130.0MB

MD5
34d937a65331dc76244a05ca82bbb598

SHA1
85f62a5576dc4877eca26eb6b0e2b25a32b8c894

SHA256
c002573ea8950fb4938a404cb56a4a2cb6b6b0015f8c01397108b40af1cc9828

SHA512
1d99aa596de1a156c3e51b3ef68b987278ee1d4a1bb1344cfadf6a5367879f6f6a2d635900e89b56c1c294d37c06e8712ebb131cab22415d40477174ba3ffa87

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\chrome_200_percent.pak

Filesize
202KB

MD5
7d4f330a5443eadf32e041c63e7e70ad

SHA1
26ce6fb98c0f28f508d7b88cf94a442b81e80c88

SHA256
b8704be578e7396ee3f2188d0c87d0ede5c5702e9bb8c841b5f8d458abf1356d

SHA512
f1b9b0dd7396863aa0feca06175b7f9ea0be4122351ecf0a0549ee4c34f85ac8c63cc927d7409a40b6e19fa91d2cb00a145616ba19f47045b2345bfbc2d4802d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\d3dcompiler_47.dll

Filesize
4.3MB

MD5
7641e39b7da4077084d2afe7c31032e0

SHA1
2256644f69435ff2fee76deb04d918083960d1eb

SHA256
44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

SHA512
8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\ffmpeg.dll

Filesize
2.6MB

MD5
6e8ff0c1204825a0427f568a0af0bbd8

SHA1
fac43d02e0f24e92e5bd9faa5050523469486565

SHA256
61a65e313a8ec1416ca57a778f440a502041a7286252e9fe52a8df0cf0e021ad

SHA512
5b866de52b22b6dd3e25b60de71ac2675b274485dc4bfc0a1e0b90e12b6b7c0e57350740bce30f57c3fff323ac8eab1ce38e4cc5c4526a3d0b6c28f1beae4034

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\icudtl.dat

Filesize
9.9MB

MD5
80a7528515595d8b0bf99a477a7eff0d

SHA1
fde9a195fc5a6a23ec82b8594f958cfcf3159437

SHA256
6e0b6b0d9e14c905f2278dbf25b7bb58cc0622b7680e3b6ff617a1d42348736b

SHA512
c8df47a00f7b2472d272a26b3600b7e82be7ca22526d6453901ff06370b3abb66328655868db9d4e0a11dcba02e3788cc4883261fd9a7d3e521577dde1b88459

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\libEGL.dll

Filesize
429KB

MD5
dd89d4e2e2f87a0408f71324b1b12bf6

SHA1
d2cddb78e1e3c9f3806410fa4599a115c0981c12

SHA256
9727aa72f942760d6608d41ef41ca1a9351a57b1609795ba25abb61da6486855

SHA512
1d0ee8fb90b3fb2181919962ec2cbe709308eff9e3671350e5fd7ff72262f46e02572f206eb6c54408cdbe80c86eade6b77d8538f0b131e9501fe30c7afa11f8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\libGLESv2.dll

Filesize
7.6MB

MD5
2a4b48bb231427441c0f044fd2452f87

SHA1
195f1442aeaefccc38b19873f6a98fad3500963a

SHA256
213ab083b6b7b6ee8a1cb2786d0cf5af6d65aba34d4e8f3a63dc153f06fd1ffc

SHA512
7a5ffcad4ffb8f08543291b9adf8d29628df361a73a79abaf0befe2201c39b04a217c1627d6e9e34357ffffc3495960c1f5fbddb421468ec6c645cbb248a0d99

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\am.pak

Filesize
150KB

MD5
5c617f3833923fca5717a549fa57adca

SHA1
0102ac3c8041fab6a1a65a3bcaf7e79c0b7fd719

SHA256
5f323c0bd185d5bd5f7ea737018f14fd6ea500ba5440bc74f5c09b635518eadc

SHA512
87034e798355875f3459567ed1f11e5455fc5adc9634eec33e9db2446451febf7f35f617709a9b09bf3bc52f195edea0cb47d474d2c11ca93a8b5383142d45e9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\ar.pak

Filesize
153KB

MD5
8f9c8dd93b03202220b5e226c6956025

SHA1
8290dba9b8dcc89928821ead04f7cf599c0ba557

SHA256
e7f9a474399c0ca0daf28c6153f6ec7ae87423e66c8ffe0849407471d20b6237

SHA512
3eb0b80cc7243ed646cfc7be31eb27f0aa15f2aa8a5d2c50c3e5efd8a81759637e3f986c5c294262ff3bc94a939bb3803268b4eda46b3cfe224f596bfb4ed00a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\bg.pak

Filesize
166KB

MD5
00d012a55a50bba5de8b2fc2e0d163b2

SHA1
89163fa9905876167a0c7d3446bcb0bd30f88ef4

SHA256
bd3a3aacc3cee9864404755eee9542e0f21efbebd4a71e5333d15783d4ce18c9

SHA512
3bd6c774729f3531d316917deb7d8fe977c5bf5a3e85846f061c4af5fb6c45f79d8a3557a47d4569ad52819b3ccab13d386a9f5c1801e25e969e194a956d40a2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\bn.pak

Filesize
216KB

MD5
80c804a82c617e7e0fc1e7f0df63290c

SHA1
a81f3ac6e92785e4c96e7dbd01fca8bfd446071a

SHA256
b4ed891e8b38452623348da12d325b52407446114cba664a8e25a26a7cfaf773

SHA512
919856917f185dcaa6204a0b990e49498ef59b72cf93f8b6da44785f4e889b70c0b05300ac15009260ddb36a8d4f06fee5d8c4796e60a43c2957ea436f7316bf

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\ca.pak

Filesize
105KB

MD5
79ec325651589f138c7840c61316d8f5

SHA1
37503edcae710e2d61f390064fa2d9893d4b9c8d

SHA256
9a4e286a58bb9a58e9e30d982783663c9bce40730cb6dad4c37980038040919e

SHA512
f00a9354871c77947d2b99e83b54babcb46b5a45c24702c1b5f750156abcb2a00d12c6b4c2e15634d4d560de0afa5b9c368d31f08cf447f2209f51c0b8ef6384

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\cs.pak

Filesize
107KB

MD5
0325d16a747cca73a3a2b0c94fac123d

SHA1
e5989627742ecee5f8996001002e97627bfbe10d

SHA256
c00829fc57c7e1e5419fe3202f114d394a590b8b32b1e55af42772c93755945d

SHA512
b824297df25c097251432fa72ae1258092e692ff3e4c527599897d7d3e71007cbd80e300de54b87146889f71d537c7d297c1b3cac04b6e08d7ce29132ec9e5dc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\da.pak

Filesize
98KB

MD5
29f37a66ad8035d0657a1c7176330c40

SHA1
ebf26afa557b44ff5248207425083c750a397f49

SHA256
6da77a20fd6fbb228b2de5f197225342da18cbc58d26ebf542cf20d23e00f033

SHA512
4c360f13c499a9b4b8e2b6f29efecedcc571130b90cb93a3c21486642704711db0a182b63b3be307b39c382de73787269822af76af9032e4f9c4a5596eae8e50

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\de.pak

Filesize
105KB

MD5
5f9f5187b2c3a4bbe6077a329ef5c2c1

SHA1
68ab6991f89f5c41c055b07fd97ea6d394d87f12

SHA256
e964d841b9588b7412f1ff86f004e6b052f993bf2153e4dc4bee6c5536be1744

SHA512
560a90d24c5fba776ae526033163ce61662978599c4b171f0bdbc80c72206a9443ed1aab58819ae71345ecafa795527c0673c12b73ba7ac381b7def7bbbee118

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\el.pak

Filesize
184KB

MD5
f4083cf1c56edb2d8701fc1809c9d8ec

SHA1
909337883e1f898c98de9b35f7889d257e5455b2

SHA256
b624633365c19e6e3cbe200b39889711994809796dbee7988883165d0cc1d6c2

SHA512
27726b5cf51760d6938c17e3b1346f0f9c36940a94fbb9428d9ba8809598e07d7c5429fcfc3ec56ea795d65555b4d19676cdc299d0f8937c503d92cb87b80ee4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\en-GB.pak

Filesize
87KB

MD5
b8b8de138e6cd2ad1eee182f2befc905

SHA1
acb5fbb8d3026d2cf0d5afcc0b2407f7dc7f7cee

SHA256
4a5e6439c6731a5273970c8c053b4a89018c57f1d9be81d85f24978233675442

SHA512
c5575f68aee1284a82a47e4d412df6175550bde1d8ffd3845d295f88687ece4a7c04f0ab9fcab78182fcabb6876ccb9a1f6ee815b0abc0eb96fe59f5ff849e4b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\en-US.pak

Filesize
88KB

MD5
af5c77e1d94dc4f772cb641bd310bc87

SHA1
0ceeb456e2601e22d873250bcc713bab573f2247

SHA256
781ef5aa8dce072a3e7732f39a7e991c497c70bfaec2264369d0d790ab7660a4

SHA512
8c3217b7d9b529d00785c7a1b2417a3297c234dec8383709c89c7ff9296f8ed4e9e6184e4304838edc5b4da9c9c3fe329b792c462e48b7175250ea3ea3acc70c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\es-419.pak

Filesize
103KB

MD5
84a1995559e8fc00c3e46ba63eff51a6

SHA1
24b57babee3291419fc29aab9c9a2fc0fe9c3d8a

SHA256
2e1cf9d3e3eebe607da44873cfe37b9a84615962e3450313c3947920d4de4fda

SHA512
1b8453367bbeb12f237f850eb0ef67d4b6caa973f2e6accdae6ff5b7b3991d5be2c5d76f787d2c7ca5a10d2d0a92b47fd55141c9d900c850f80cd916abf5425a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\es.pak

Filesize
105KB

MD5
4acad14261fa458cbc61451f4255c891

SHA1
bfbf2429190b85f692bc97d12822cedd53a70742

SHA256
b927984d25359f3d7a20d71aa4b16d2ec4c574461177825b5221865f416d1e71

SHA512
24a71134f5c8f3e03b29491e11d0d0d2b9988c2528593c753893986c6db6ff2bd88e2e5389b086e0785e24141894441efe3db976111e2ad5ee5afbf7374fec1d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\et.pak

Filesize
94KB

MD5
3f2f42e0e8ffe5c26295f5e15480edca

SHA1
e183e93fe99145ce0471687e930926018b1fcc19

SHA256
9cdefc472c67247e67da040b984e800cc8b903a1b39c742e6962ff5c423f391e

SHA512
bb61da1665100b59433d03d05fcd074d36e07ea3c29f2f7c5305e2b560e2a2a8fc508d38b45798d98cd3c1987165667cd723726397e3d1e4be006c17efe11c3b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\fa.pak

Filesize
147KB

MD5
0fbe88d360abc020ef6d511ff5cb70a5

SHA1
8abc47bc30bb0128b84ca4335dc09a67b051edf4

SHA256
7e8f7f42300178f001ea5f74c63db25d813b7c25989114dc7673c76fd92a72c9

SHA512
1eb2f414521b4ead4eccc26305cf89eddf2a9e26bc5e8d100946a8b442694e48df6fdcde858197b23cdd47c83ed7c316d280a642017e7516c5db73c3322fba26

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\fi.pak

Filesize
97KB

MD5
0c5f18712c639646e37fed054781b147

SHA1
faecb7cb6838783e15bc52c8dc019736a334d59b

SHA256
4e538a14f1dbc872a85fdb4be1e19145553ecfa3b07ee7c810b690c52b889684

SHA512
ef9f1158c35045bbef92fe70d9006cd7dcc3c834f5a4beba5b269ad6c16f9790e316b7e2617100567919ad647a1353cfa8b80d5ede23cec9e5f7ae9b4e49c154

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\fil.pak

Filesize
107KB

MD5
249ac7111d6310c67b42e973f6aa7646

SHA1
db19f2fa4eeeec09906ed31bf6295e7831bf9e2c

SHA256
cb536b478feffd3b55ec53676cce84cefc9e000c1205273bafcdaf6ee6edd381

SHA512
e96d000925be9fae898602f5d62ae3e642e91aa2957d723ffdfe9cac9bd277ba2155be31620fbc326d5cc43d47a0e08314fe27688a6eaf786491d6b39a52a00a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\fr.pak

Filesize
113KB

MD5
a9552c30b27aca538388ba34c2374d75

SHA1
39173220e9da4c3d591bdb1d0dbba77dc8fba6de

SHA256
f3bfcd6a297a7634c24f2fbd3de96f02588b0603d4a7618bb7588f6c091beb2e

SHA512
f6d01a2b0c03741092858b7616de8b52662b73a00e49b2d7b5e1a05195eddae507c432557b2bf8697ec0b8e3b620fa3f38ba577a7edd909556d73498fcffb9da

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\gu.pak

Filesize
207KB

MD5
cf428ecec583b73172fa789ba3f9aa6b

SHA1
9a7456009b5a53c4f6470a370319395da394e462

SHA256
1d4d407233a4c78d5a9a242b43b21aa89fb68a0632bc52b0a515d69491632e85

SHA512
2f86f9679e04b8188d7ce44bf0a7bf4b998d9771e9a8a83b4be4dba5e5d21ebf6a00091792896d9a8d4ed38eaecd43d8d2cad920237af1ea702dadc0341be9c9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\he.pak

Filesize
129KB

MD5
a275c3557e819c6e9fb029643e38fa17

SHA1
8c005cb081417ff2be0d7d8fb6356519a96f5703

SHA256
4a9862ee8e139ae74e6336e0207d484e1a1ae0f689b5f1cc06b6fea66d2090d9

SHA512
72936ffb29ad5b7fab17357286eee7fa9a6b933423fc8618b19fdd841b37d9cc613a35e04614cb74f69f49a4e8bf7a8b48bb55a10e160d8363dbdf697bc314c6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\hi.pak

Filesize
213KB

MD5
eb017ac26477d54c707d3e965ec352c5

SHA1
112001c7a38d9b95d3d0e422e10c585079356018

SHA256
06424570167c9bdd7e13b115a632d6ab58de7a4fa14f8d094627bd12d85e9318

SHA512
8dfb1f8b18ae62841a40de244ce725b9ad865b4de7d250c0d5799f6896d274276e73672e3de455d0312a397d20598c768462895e4a768511b7ca530717611837

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\hr.pak

Filesize
102KB

MD5
551026fcbd640c1b911ed5b4cb7ada68

SHA1
3aac7631c7f23e15a1abc4fa1cee98acb695aadb

SHA256
cc48d7deaf73103e22e3e5900503396e2a2c9e5bf1450a4df8ce94179b1e47a2

SHA512
7bed851acc8a137c481968902006917c6eabdf1476c4cd74dea7bfa731bd45eff6b742c4b4ef48ba9c9eb4b2ba86c09c14878c05ff797bf56da075da9e53bfc9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\hu.pak

Filesize
110KB

MD5
e51afbba3250e655bc01e424a29e3162

SHA1
d7aaf2f2f9629ba9f7cf8a513c2905a13d0b6a8f

SHA256
61ae4e65474cb4ecf5edb2ec9bb9ea2b7a47bbf769f81c8fee1282c13b209783

SHA512
57fc72149761cdf1de5c021bf7e63d79d91ef2e54dea57b9bd9f659dbb2c2f76dc43904c53518c00fe4ca80b92b6fc57489e275fd0006b2295f31dd45c0618ec

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\id.pak

Filesize
94KB

MD5
0b9e5f5651aed9d1299f3246597ac182

SHA1
62aa835853c07e66d027d129265429adc6779491

SHA256
e07be6b1a095f235a4babb2ad5e8018c8c1b2f7cd6feab170124d25898e764c6

SHA512
9d4c238f9506f41a43d531a762f7b8426db83ae093433e075237ec5211451ea6f888ceb14b8a055b67e5c6be43c0087d1c35de558cbc6d828da96043b98338f2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\it.pak

Filesize
103KB

MD5
fa6eceaaa453fb66bd631aa9babe0026

SHA1
790bfefc29597d09f313c08e7b23ff298d60fa23

SHA256
4e2089d3fd90977f9a3a88b2af7fa9ff3b9864969d2f4582431626ae1f37c158

SHA512
88eb70a25a6b76e5b3272d4bae0721f23610ddd1284f54cb991eef3ad78eca13f47c6a8d79d5fb73f8fe171d5abea770b6902d0a1541884cbd5677f3dd4920f5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\ja.pak

Filesize
124KB

MD5
932a8b529d16e79c1471fb8c92109eeb

SHA1
4cec50af799472bea97fc1b1a127c31d9d08b176

SHA256
275307a3a9708c0698565f10941c57d42e1d2f55709a025d37e588699b5a985e

SHA512
f2ddb70f819ef08b51c73748f2898ebc987d1d46dfa8e8ea00d2309ac51e37973310bb4f2a3503bb7ad5ef68150b01f3fe5492470d1e30fab374159ef44f8f4b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\kn.pak

Filesize
237KB

MD5
9224beb43327caf18c4fde76482ae12a

SHA1
ebaa89421838c093e36d74cec8bb3521772f29cf

SHA256
1a3fa5261b58113ae1a5cf140abd93e812b4a866a19a4c54929fffee5f42b18b

SHA512
2c3ae5fd43607f34562b935bf6fb5dc62d083073f430959c4d883c188f744f49ac38d3a3bfa8c3e61113a2e4813d06fcb499ffe3cbfd07979b405b0cd6eb2432

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\ko.pak

Filesize
104KB

MD5
d6c5199671535c5b644d730c9d8c9063

SHA1
7bc876a53b0da752fc93a088af1ecd043dea6ad0

SHA256
0a46cce08401a72e44178349a61cdbae5fd78ca4f071bff2bf5f2e8c877a25f8

SHA512
71f8c2a676c7e672476d578ec36d8e9b16f823fe257f7da7c22b84dcdebfb7c18480fb52a386f14b9d60d2aac6c322aaede7d61f3032842d3bf713edda8cf857

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\lt.pak

Filesize
111KB

MD5
29aeeb61df906c770e43ed477160f5bc

SHA1
d3224dff1967ddd1618d1573d91c3149ded8ae3e

SHA256
225e5784a7a616f83d81e6f3fdc5510e975e9fbde741b673deece5ded1604a9d

SHA512
09f601216ef230c20e58391c566caf388b0ed5421cacbc06fd50bef242acac599e09f92fe63aa055dd314e0ebe9985b76016d82d32b426e51b1f63c7b888ac9a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\lv.pak

Filesize
111KB

MD5
ce3cb88e12f86eb6f6ad23a4d34f49e5

SHA1
31ed4ddbfe6befa49c6c28089edb1b1617d896bd

SHA256
d58b6308b64a1cda4ee0b2b395672728ce7abb73c44961fc911386569caee60e

SHA512
5db77b4e3fe2a2c76fc15134b7db1c4acdcd08cd296aa1657a08b55871353fc7f911222ff16078379a8596d401a66272a431fa9feff8bda5bedac9d7479d02f4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\ml.pak

Filesize
250KB

MD5
aa549352ce43c7f3aadcf24db4b28039

SHA1
52f9de28a67e438a4b055b0988f2c4dc480a61fa

SHA256
e51d9a02ad11cb9825368da9a17af7294b7e6bf11079e2072e4bec028ecaf20f

SHA512
d220ac779b5aa363e4837430fb66fc3833fe0331fba3c634ad920f8dba8dbb1f32fde0eb6da26cabd9c089326a46252df22ade62299d6bc37c9b0f3694e8ab51

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\mr.pak

Filesize
204KB

MD5
896759a28d38e5d8f415570dd6f4d85e

SHA1
23f55cde464192839434a1e727ceb285b8b1f82b

SHA256
4293afacf1c4dce2423c368a45fec4b33aac7232e7b7c1919aa8a5a20fb026a1

SHA512
4392943394e2ebc257ed230f993d6f0280ad4106e2623bd9a498c8cbb8dcaf05a49fb998f855fbba637030f43e68d15dc429d71604ef285f211a9c86480c4e60

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\ms.pak

Filesize
97KB

MD5
407dd10484a99b21ffdae6016132bf26

SHA1
d1d7a5524fdf026a49391522c42d059406bd0442

SHA256
83248a2aaefb87fc19454afa34bf5df99b95b98f823b534de0bae552c8260d93

SHA512
908b71411e34ec56e77c5837a856898f929dddc81d95a7e2b6d47f4f4e1d72b499d627a8cec7233e4f39292f592b6a90354e6325aafacc145c994abea1ff6f64

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\nb.pak

Filesize
96KB

MD5
1bdfc009f54c1e5bc8eeeb5017f9de53

SHA1
7427d3f37771886af1c0af1d20468960c524377d

SHA256
21f3efe54a2a0ed9e2f618b2a50f89b44957bc7c779e7f88c1f10b310cea8bd5

SHA512
eee4aed543d30c7a74a64350cf67b454ec4ad56dc6a51f88dec648b80a33146f5bd3ffadab16a1f0b8e1ffe427f56f58a86da748ed1b118ea7fa72610d84c07a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\nl.pak

Filesize
99KB

MD5
fa16e91633aa0f20e49b7e19bb57aacb

SHA1
595d392d20df35ed71f4461cd5c85b77a68612f1

SHA256
e94551ca94505f068ecd0619af676b7b3a869f6068af87f0f537cace8055ba4b

SHA512
d3fa50f247cb216e07d4905bfec4ab39d15bbc9b60cf0e3dc733bdcd2a0cbb1f8513589c40111335797248119e59ab2d2d46c2cf18c496796fd4b7233a829a30

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\pl.pak

Filesize
108KB

MD5
da0bfc4ef754490879e8dd567961064a

SHA1
f331c571422c5bb85f90fe915756ad9787103c24

SHA256
c57c2e534da554e42388815cd3e848630ed46e1e61e640a6f3d4fd7cbdfb2aed

SHA512
1ccde932c1354fc0880afb7eb1fe9a8b93297cfbb21e0dbdb78a07b116b951672a2d1dd25e0dc94fa1384ac7bb22a007b468a391457851bf8c88efb9708a7f37

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\pt-BR.pak

Filesize
102KB

MD5
31e00c1fdfb9f86d7f5b5b285689cff8

SHA1
c5131466499d78c7282f29b3b12f8934a139991f

SHA256
ed9adacad575344216ee986e9c04908a5093aa7a0ebfbf2549df4c668a35f356

SHA512
b36b87330b29f99ca32d781175f1fd485fa034eafa2458f4191b70bdbfb2866fd56edb0e97ce7232b0dc3135b939eb7ac1161b1002d9322dbc7ee016b8069f09

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\pt-PT.pak

Filesize
103KB

MD5
f33190e2616875ed2349115e128a54fb

SHA1
27e44fb2cdfecc19f5c91ff2f2e69956cd59be57

SHA256
da64b5178bb41be0684cb3ef1204becb457520fe4960c3252f5ccd6a9ee9e29a

SHA512
3020da0fdcf7984557ef7af1c9f0e7cbd1bf364a8841e6671cec4b517ac89e9c4bed680a2a2e76b18db5e2d10c7f1a41c5758306e3f20eb248796b2be6e02fcb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\ro.pak

Filesize
106KB

MD5
4c4112b99fda13b8fa5373d379f476fb

SHA1
2422afa9ea5b204fe84cc241cf6eda2c8b319fa2

SHA256
99730524e53ca07481f8cdbbdace228aed42abc19d2277d26c42f47653f3cf07

SHA512
c663a678d0eeb66697f430e785c32fdb021a40c6456807f3842fa0e2c9ae3450fd59c3ee15e9a0975b8d100fc7c7118a06afd595404a29d777780106c8e1ad4f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\ru.pak

Filesize
166KB

MD5
5d77bc0c2aa843ec5be6a3614c062359

SHA1
0b22c3376169a5bbb4697d586e4a0d3094739dd5

SHA256
ec6654ffd877ec62d8afcf90469ecef5790e17c7306654cfe4b905de449b06d8

SHA512
a2cf1ff9f7020ba1998a7091b802dd1aeb59bf2b800a41ff221152e2d017435372bfcd52ec454db543e856288e2dc381dc46a7926d4bb4b917b8749657fee0ab

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\sk.pak

Filesize
109KB

MD5
ba56090d9658733694473c7861d04040

SHA1
dde05b47d06fa81abadc1b8f74e5993d0ea61ca1

SHA256
d7baa6b1c0355e1ce9088c6eb508235c7a640ba70cc7ad84c9ac607026400495

SHA512
ed49f76f2ef4975e105fe13850258a51e44d0ffa7167a52b398276898237636aa50f62209757dcd756e3faef5581e314e261baa3a1e46b183a3b93af68605c59

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\sl.pak

Filesize
104KB

MD5
b1e33bbb0abbe113a024694bf4608c5b

SHA1
a157c8578685f5084fd805c9d0734bc7646d77d9

SHA256
48e9004441f8afb200601ec2843a03892076deb1706e1d3a7bbdbfcdd137ab57

SHA512
94854eb7021ab112b710332a410af53e59a42c4a501eb02098a41004613e5b2f7727a192c74e2a1c17bfc584a85477e75bd1eea0187e79db1de83c8253bec322

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\sr.pak

Filesize
158KB

MD5
c56d29bcf5fb38ea25ab1a855690f9a9

SHA1
f3161f2890971ef929473c58654dac0718983957

SHA256
68a04bae37629675c49d9aaeb68a1da974aac427b61151a18f3210499702202d

SHA512
551a72041772737139190894f5dee50963f5597a2271bd2e94af390cae34967cc435bf5504601c061cf6c2ccccd19e7bb708538a6789f185412fc715e85d54be

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\sv.pak

Filesize
96KB

MD5
2befbabeabbbae5e7c57934acc5cd41f

SHA1
d48e9fd4d73627f4dcc57ec31924d97f6fd6b8d1

SHA256
c63e812fee929492974c9b5dfa14a7587258e6fabed355a105015b296246b068

SHA512
8e06850701c6bc2a4a5ed8b9d59f68b68d631be7b037e2df2a738b5a44d36a37b1419e739341a00ee7681249a434ca69ba53bbc58ff0f204322f7dfde2d43405

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\sw.pak

Filesize
97KB

MD5
2490296567a1cd3c7b0852e1ed7d115d

SHA1
04b527742cea9487344ae08c463d6fd4ba16b1ce

SHA256
8b07bfafa5c97be2da9b6146535b7848d88a44d43a45ab06dfae286d93fd64ce

SHA512
b930c14847012e12bb19bf217c79516c569fc163204d9c2b21a36f6f5061a50c3ec057882970517fc3bc4beebcf3d1b1402ccd521404cba827309940a5496b3f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\ta.pak

Filesize
245KB

MD5
8c8b63dfb6dbf75603d3e2e4fe981f9d

SHA1
3e7c9a1a01526367b016df20822a41e430328e94

SHA256
22eb9d73331e92c898b27546a9e775fa8df0fdada391734a9291b2a016662652

SHA512
978af09738b4e00ba58f91b82db6cd455ffb3cb4951c25abaf79b8159c6fcd9212348373ef5a5a421f9ff5b4604a3f5b54aea3257dcf566807b6a84824ca54bc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\te.pak

Filesize
228KB

MD5
c370f82ff93880c0f32e63ceca8f1050

SHA1
a1190895ea7e699621f930c9b4b672b786fe1d9a

SHA256
2dd8a542ee0778ee39639380208c584d9eec8932d1307bd5563e1eab320fe0d8

SHA512
be8febb9ce42731f6f3dbe0775d2bae10267f0790ce7bb8b437c4dd5e736fc28772812231b0a4a39b28dafc63d54d27fbbfd94375dbceb317fc43debbd566844

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\th.pak

Filesize
195KB

MD5
f265ec50e0eb62893fbc187c1c962dd9

SHA1
5a60ff7287e5d4e35f000d229a4cbb37db76acc0

SHA256
cffd61f7954ca10038529d14fda6a4e34c8ea1a9f202ead0b0c2db93143ef485

SHA512
696140d16655b6d1c17d59b3e280f3f387adb8ad58c4a0d369925bd01cf03a3fd934c3b8e02e9e868bb64f81e7cfbfa532e732d1cd705c52c7b0f588765ecbea

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\tr.pak

Filesize
101KB

MD5
d8373d7bc1bdee4cfb48d85694a78ff9

SHA1
323408e39b2c953728420e5f21b1d1eb25de6c2b

SHA256
b1b66bfec0aff21c64ec8ba3f19008501f196f80e7e41b2e8ae73114357df458

SHA512
6960d7c0481985e0f151d66d047a02e7c31cdd670afd71a0a3949b9b0ab9e083a5ca55faa48e38c8793ebbf1218a4503043867d1999b163a923e5afce8058888

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\uk.pak

Filesize
167KB

MD5
e87cbe2cffa7d3a95a8f837231d6f44f

SHA1
40f7d1602b47c7a7ad445fe04377e3145f8caff7

SHA256
fa035595c375522d09f9de5a545f5339fcd3ddb224fb19f1828a7958b7dff3e8

SHA512
4a8b970b50da8b92b824c92c6075c8b4440826da5a581c91ad6e5b78bc65e3b80be0080e4fbb20ad91e3ee30f8a3a05ca6925e93c76c8d2474cdb9a8825acc74

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\vi.pak

Filesize
119KB

MD5
dbf8363fe244c7d45d44e987d7194566

SHA1
c3bf0058f956fbd6fa0ad89218a22c7668964b30

SHA256
044c48581c2395a8eb0f85b5905e1b4cce1fc1fef2196710cef06e197afdfa99

SHA512
0953c455581f045a17e2ae35712487f36603b942f754805011047e4dcf531062d1dc1c8755f022177f7e21b7ab52fa71db5eac7c524424e1e5a2563429318e34

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\zh-CN.pak

Filesize
88KB

MD5
d9fb680d115846809114de2b35ab4ce3

SHA1
d1f68e0181233c98ffbe91b09910b9d87c1e35eb

SHA256
690dafdeb5be360e8b3a84c711d0d48b3cfc74c871b89a8f03f8058738ca9834

SHA512
5968bba15bebf047df19b519da87bde959ccf1e564012043ea390b3c1e572bbaed79b8be6bfb884f4f9da8f1c25f3e6709d6620c582910deaf723906fdb04525

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\locales\zh-TW.pak

Filesize
88KB

MD5
d0141fd3e851cdb790549c069a76abcd

SHA1
3da3787a8ea94aa066c5e5d17e42481330e0caff

SHA256
8187e67cde3292c6f18ea0a40f8f8d3f2cd604e62feec9ec40c71b5d2bcdec9d

SHA512
947e19e8fad3a761e5e1d0380547a8f9bc06f28cf8103d80865eb9ced9e3ed3d601bd92710ef1cb9fa68d56eb62ae95c1aad78145d455bcb6dda1b8c280f4162

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\resources.pak

Filesize
4.9MB

MD5
91f8a4b158df6967163ccbbe765e095a

SHA1
95db67f0a2352fd898f4a4cfdfc860f6a9c58c87

SHA256
a30b8269e588c6cc2cea5fd4685da3012fd10451edb59a283005116f8e033182

SHA512
6450d75d53f24d11e1c1e7e3cacfc57ee9dd09c00ca0dc2ff30f580b59a6b17e7ad7d96682195bd7d806b49068653538c77ca4200491560cecff128a0b012d92

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\resources\app.asar

Filesize
53.6MB

MD5
a409b93ae59630084ef56912c1c479d0

SHA1
3b8f00f1b1a92f933fa08cf147177ea6ab1e9db3

SHA256
09160ebbc3d6fc22fd879cc2aa4b5feba128280ae0d7d2b42f8ddac47dd88ff6

SHA512
20566256c710fe31a6ad4dcfa46e64bba4416398481ac3fc4ec1e2abc05b6588919e5a3a2ba53ec92fda72bfbfc2d24cd506ee4c27ed86466452c806ebc05a58

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\resources\elevate.exe

Filesize
105KB

MD5
792b92c8ad13c46f27c7ced0810694df

SHA1
d8d449b92de20a57df722df46435ba4553ecc802

SHA256
9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

SHA512
6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\snapshot_blob.bin

Filesize
47KB

MD5
1343b7240696c412b51a9eb20a064d79

SHA1
ec9eec2b55414b790b95a64e5c67ea9d404d6620

SHA256
1f119776a726c990132ed3f30109f9505a017be68bcb5908020283011ef54b3b

SHA512
c643d70676852f59bb81ec1e733995dcc6d170224af8bcf2df2d292f924c208111770f14e7db5795bbddcb9d5735d499e86bfea674e3b04ac2d3148543a442a9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\swiftshader\libEGL.dll

Filesize
448KB

MD5
9eee95cdd2ed20d20fa66e3cb61cd7d0

SHA1
f3495a0b23e0a2047001bc7ae306b45249a0cc66

SHA256
564ccffa0fbd3ab325d233d785e79e4cc2cefcdbeadbbac1c12617e84ac97729

SHA512
9e243a199a275648c31bd5013b12a10cc9c29dda17f153bbdc1e79bd03ce01a71f93873e3d2b4806b8745516ae0dd9d5dc6bb83766e7ce5e41a1314dab7aa403

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\swiftshader\libGLESv2.dll

Filesize
3.1MB

MD5
a95b468a1ca95eed5f6490e9c206a443

SHA1
6ac1c8947f424b83c03d2c0f807739ab84530895

SHA256
24074d69f67605752e79e669ad1ffa3790700d707d742266ad4657b9ddfbaa77

SHA512
6c76d1e1a374947ab22fd33659856857ff5867c0c38599037bf7aa19ddc52348623e0310c2536d4fa5c63d544f0cd9f15a902172f74f2534eca68058733417b5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\v8_context_snapshot.bin

Filesize
161KB

MD5
40ecd5d3ad7c60724875be1c2f339903

SHA1
369c8f80f9c1085ad8911dacf1b2af1533122732

SHA256
49889b42d7a5b829a5af73fa8f4e4eea37ae913ad353bafb7445170e7aedf961

SHA512
649eba643dac9779145c035efeac823893da813a46a5af08e0ded301390443e97168ac7ec7db497b2f940c1e2024eee21519e0f3909650aa5fb560b3d800a8ba

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\vk_swiftshader.dll

Filesize
4.5MB

MD5
28da89a58a9858b7dc6f6e5a47fa1fbc

SHA1
c5408c1a6608e5bab172f8c28c9d2a6a13a4ffd7

SHA256
56d7254445cbbaa5fc755649c6888bfb4296c2ff2acae7eaa6bcd4510d24f80b

SHA512
3a7c7465de59966a42be7bf375ae2292f20fd35845a5dbcf0b4dfcbe902d947be1279e7c7a9b0492beb820c90150f58b9da3162c9658847a6b118d1c546a63f9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\vk_swiftshader_icd.json

Filesize
106B

MD5
8642dd3a87e2de6e991fae08458e302b

SHA1
9c06735c31cec00600fd763a92f8112d085bd12a

SHA256
32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

SHA512
f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\7z-out\vulkan-1.dll

Filesize
707KB

MD5
5d38080e124b350146e1adcbeb8a87c3

SHA1
baa9f9e204eb7d2525d55a011ec43a6fa90a5ab8

SHA256
c3718a47dd8cf5e0a6b45188e42f5c78ae535e98119276d7e54441f2def911cc

SHA512
8d877fb269bd22272999e24735765a3ab4c295809411d5c630d24348a928fb0ec1442b94ca69318660b722e5e50febf3636e76e29ca115eac7e7606fac256bfc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
\Users\Admin\AppData\Local\Programs\Setup_\d3dcompiler_47.dll

Filesize
4.3MB

MD5
7641e39b7da4077084d2afe7c31032e0

SHA1
2256644f69435ff2fee76deb04d918083960d1eb

SHA256
44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

SHA512
8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5

Download Submit
\Users\Admin\AppData\Local\Programs\Setup_\ffmpeg.dll

Filesize
2.6MB

MD5
6e8ff0c1204825a0427f568a0af0bbd8

SHA1
fac43d02e0f24e92e5bd9faa5050523469486565

SHA256
61a65e313a8ec1416ca57a778f440a502041a7286252e9fe52a8df0cf0e021ad

SHA512
5b866de52b22b6dd3e25b60de71ac2675b274485dc4bfc0a1e0b90e12b6b7c0e57350740bce30f57c3fff323ac8eab1ce38e4cc5c4526a3d0b6c28f1beae4034

Download Submit
\Users\Admin\AppData\Local\Programs\Setup_\ffmpeg.dll

Filesize
2.6MB

MD5
6e8ff0c1204825a0427f568a0af0bbd8

SHA1
fac43d02e0f24e92e5bd9faa5050523469486565

SHA256
61a65e313a8ec1416ca57a778f440a502041a7286252e9fe52a8df0cf0e021ad

SHA512
5b866de52b22b6dd3e25b60de71ac2675b274485dc4bfc0a1e0b90e12b6b7c0e57350740bce30f57c3fff323ac8eab1ce38e4cc5c4526a3d0b6c28f1beae4034

Download Submit
\Users\Admin\AppData\Local\Programs\Setup_\ffmpeg.dll

Filesize
2.6MB

MD5
6e8ff0c1204825a0427f568a0af0bbd8

SHA1
fac43d02e0f24e92e5bd9faa5050523469486565

SHA256
61a65e313a8ec1416ca57a778f440a502041a7286252e9fe52a8df0cf0e021ad

SHA512
5b866de52b22b6dd3e25b60de71ac2675b274485dc4bfc0a1e0b90e12b6b7c0e57350740bce30f57c3fff323ac8eab1ce38e4cc5c4526a3d0b6c28f1beae4034

Download Submit
\Users\Admin\AppData\Local\Programs\Setup_\ffmpeg.dll

Filesize
2.6MB

MD5
6e8ff0c1204825a0427f568a0af0bbd8

SHA1
fac43d02e0f24e92e5bd9faa5050523469486565

SHA256
61a65e313a8ec1416ca57a778f440a502041a7286252e9fe52a8df0cf0e021ad

SHA512
5b866de52b22b6dd3e25b60de71ac2675b274485dc4bfc0a1e0b90e12b6b7c0e57350740bce30f57c3fff323ac8eab1ce38e4cc5c4526a3d0b6c28f1beae4034

Download Submit
\Users\Admin\AppData\Local\Programs\Setup_\libEGL.dll

Filesize
429KB

MD5
dd89d4e2e2f87a0408f71324b1b12bf6

SHA1
d2cddb78e1e3c9f3806410fa4599a115c0981c12

SHA256
9727aa72f942760d6608d41ef41ca1a9351a57b1609795ba25abb61da6486855

SHA512
1d0ee8fb90b3fb2181919962ec2cbe709308eff9e3671350e5fd7ff72262f46e02572f206eb6c54408cdbe80c86eade6b77d8538f0b131e9501fe30c7afa11f8

Download Submit
\Users\Admin\AppData\Local\Programs\Setup_\libGLESv2.dll

Filesize
7.6MB

MD5
2a4b48bb231427441c0f044fd2452f87

SHA1
195f1442aeaefccc38b19873f6a98fad3500963a

SHA256
213ab083b6b7b6ee8a1cb2786d0cf5af6d65aba34d4e8f3a63dc153f06fd1ffc

SHA512
7a5ffcad4ffb8f08543291b9adf8d29628df361a73a79abaf0befe2201c39b04a217c1627d6e9e34357ffffc3495960c1f5fbddb421468ec6c645cbb248a0d99

Download Submit
\Users\Admin\AppData\Local\Temp\51a93306-e67e-4924-983f-950da4a46b3e.tmp.node

Filesize
1.7MB

MD5
2a06e9dc408b8f8a2df1113c186f4e05

SHA1
f98c865fd8752cce053e53d1e3c4206ecb5b6eea

SHA256
bd0fa201903917dfa5b75282489082e73ae6624d50d2947e1f4db0fbcc052573

SHA512
b6a1ab3373322709ec5b3dc398e9a697b953f2fd9fe013f415bad40e858565da45060b126175cb8778208d3d0b09509f2e11307e377466acafc68db39f8b0963

Download Submit
\Users\Admin\AppData\Local\Temp\7ab6495c-9ac9-4791-8f68-886ba9271ffa.tmp.node

Filesize
149KB

MD5
132c35ff6d4b5e241866c4e281858eb9

SHA1
ac6ee55c8aeb653b6b8df3ecd340b4414d15e29a

SHA256
226b636e34dfc851806f1085e3dfa709d828649b7f610a82340bba9bbe0c71e1

SHA512
66bc772c3c17039f8f73e577341a4aad139fd45f1a2aa06bb4f037c708ab30a7d14fb15eb61c9bd6a7237e537d42aa66b2c36f0425bb666a33e39cdf05f03610

Download Submit
\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\SpiderBanner.dll

Filesize
9KB

MD5
17309e33b596ba3a5693b4d3e85cf8d7

SHA1
7d361836cf53df42021c7f2b148aec9458818c01

SHA256
996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

SHA512
1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

Download Submit
\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\nsExec.dll

Filesize
6KB

MD5
ec0504e6b8a11d5aad43b296beeb84b2

SHA1
91b5ce085130c8c7194d66b2439ec9e1c206497c

SHA256
5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

SHA512
3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

Download Submit
\Users\Admin\AppData\Local\Temp\nsz50FA.tmp\nsis7z.dll

Filesize
424KB

MD5
80e44ce4895304c6a3a831310fbf8cd0

SHA1
36bd49ae21c460be5753a904b4501f1abca53508

SHA256
b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

SHA512
c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

Download Submit
memory/596-945-0x00000238DE800000-0x00000238DE810000-memory.dmp

Filesize
64KB

Download
memory/596-927-0x00000238DE800000-0x00000238DE810000-memory.dmp

Filesize
64KB

Download
memory/596-925-0x00000238DE800000-0x00000238DE810000-memory.dmp

Filesize
64KB

Download
memory/596-948-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/596-924-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/920-1038-0x0000022B7BE80000-0x0000022B7BE90000-memory.dmp

Filesize
64KB

Download
memory/920-1060-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/920-1057-0x0000022B7BE80000-0x0000022B7BE90000-memory.dmp

Filesize
64KB

Download
memory/920-1037-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/1440-868-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/1440-869-0x0000022B73E30000-0x0000022B73E40000-memory.dmp

Filesize
64KB

Download
memory/1440-871-0x0000022B73E30000-0x0000022B73E40000-memory.dmp

Filesize
64KB

Download
memory/1440-889-0x0000022B73E30000-0x0000022B73E40000-memory.dmp

Filesize
64KB

Download
memory/1440-892-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/1664-1093-0x000001D5D6310000-0x000001D5D6320000-memory.dmp

Filesize
64KB

Download
memory/1664-1116-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/1664-1113-0x000001D5D6310000-0x000001D5D6320000-memory.dmp

Filesize
64KB

Download
memory/1664-1095-0x000001D5D6310000-0x000001D5D6320000-memory.dmp

Filesize
64KB

Download
memory/1664-1092-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/1936-1121-0x000001A3BDF80000-0x000001A3BDF90000-memory.dmp

Filesize
64KB

Download
memory/1936-1123-0x000001A3BDF80000-0x000001A3BDF90000-memory.dmp

Filesize
64KB

Download
memory/1936-1120-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/1936-1141-0x000001A3BDF80000-0x000001A3BDF90000-memory.dmp

Filesize
64KB

Download
memory/2196-896-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/2196-920-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/2196-897-0x0000019C53CD0000-0x0000019C53CE0000-memory.dmp

Filesize
64KB

Download
memory/2196-899-0x0000019C53CD0000-0x0000019C53CE0000-memory.dmp

Filesize
64KB

Download
memory/2196-917-0x0000019C53CD0000-0x0000019C53CE0000-memory.dmp

Filesize
64KB

Download
memory/2204-843-0x0000018734B90000-0x0000018734BA0000-memory.dmp

Filesize
64KB

Download
memory/2204-861-0x0000018734B90000-0x0000018734BA0000-memory.dmp

Filesize
64KB

Download
memory/2204-864-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/2204-842-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/3692-1067-0x0000023BFF570000-0x0000023BFF580000-memory.dmp

Filesize
64KB

Download
memory/3692-1063-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/3692-1088-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/3692-1086-0x0000023BFF570000-0x0000023BFF580000-memory.dmp

Filesize
64KB

Download
memory/3692-1065-0x0000023BFF570000-0x0000023BFF580000-memory.dmp

Filesize
64KB

Download
memory/3880-11427-0x00000256A60B0000-0x00000256A74E7000-memory.dmp

Filesize
20.2MB

Download
memory/3880-721-0x00007FFA8EF20000-0x00007FFA8EF21000-memory.dmp

Filesize
4KB

Download
memory/3880-742-0x00000256A60B0000-0x00000256A74E7000-memory.dmp

Filesize
20.2MB

Download
memory/3880-4517-0x00000256A60B0000-0x00000256A74E7000-memory.dmp

Filesize
20.2MB

Download
memory/3960-973-0x000001AA4B620000-0x000001AA4B630000-memory.dmp

Filesize
64KB

Download
memory/3960-953-0x000001AA4B620000-0x000001AA4B630000-memory.dmp

Filesize
64KB

Download
memory/3960-952-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/3960-955-0x000001AA4B620000-0x000001AA4B630000-memory.dmp

Filesize
64KB

Download
memory/3960-976-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/4372-780-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/4372-781-0x0000021F69600000-0x0000021F69610000-memory.dmp

Filesize
64KB

Download
memory/4372-806-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/4372-782-0x0000021F69600000-0x0000021F69610000-memory.dmp

Filesize
64KB

Download
memory/4372-783-0x0000021F69710000-0x0000021F69732000-memory.dmp

Filesize
136KB

Download
memory/4372-786-0x0000021F698C0000-0x0000021F69936000-memory.dmp

Filesize
472KB

Download
memory/4372-801-0x0000021F69600000-0x0000021F69610000-memory.dmp

Filesize
64KB

Download
memory/4588-1005-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/4588-980-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/4588-983-0x00000263DFA00000-0x00000263DFA10000-memory.dmp

Filesize
64KB

Download
memory/4588-984-0x00000263DFA00000-0x00000263DFA10000-memory.dmp

Filesize
64KB

Download
memory/4588-1002-0x00000263DFA00000-0x00000263DFA10000-memory.dmp

Filesize
64KB

Download
memory/4776-1033-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/4776-1008-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/4776-1010-0x000002DD6EE30000-0x000002DD6EE40000-memory.dmp

Filesize
64KB

Download
memory/4776-1012-0x000002DD6EE30000-0x000002DD6EE40000-memory.dmp

Filesize
64KB

Download
memory/4776-1030-0x000002DD6EE30000-0x000002DD6EE40000-memory.dmp

Filesize
64KB

Download
memory/4992-811-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download
memory/4992-812-0x0000018B1E120000-0x0000018B1E130000-memory.dmp

Filesize
64KB

Download
memory/4992-814-0x0000018B1E120000-0x0000018B1E130000-memory.dmp

Filesize
64KB

Download
memory/4992-833-0x0000018B1E120000-0x0000018B1E130000-memory.dmp

Filesize
64KB

Download
memory/4992-836-0x00007FFA73F50000-0x00007FFA7493C000-memory.dmp

Filesize
9.9MB

Download