7e2154a729a258a1dd07e7157159d38dbbabd2da287e45e19b8d9aad276146a6

Analysis

max time kernel
1766s
max time network
1819s
platform
windows10-1703_x64
resource
win10-20231020-en
resource tags

arch:x64arch:x86image:win10-20231020-enlocale:en-usos:windows10-1703-x64system
submitted
21-10-2023 13:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Securaforgeinjector.exe
Size

9.6MB
MD5

be7e0c1777e27f6301a65b3820d2a9ae
SHA1

5ea935c927c0f18cdde2328ae709320a30f96512
SHA256

7e2154a729a258a1dd07e7157159d38dbbabd2da287e45e19b8d9aad276146a6
SHA512

f825173932f905a8b569d701d24aaa6f9c558895e8bcbd1ad51de1d078cfc744b3f418c537374ef42bbf2910d132575f50a42a6228daa44933220163cf419a7c
SSDEEP

196608:DLZ3ExDwGcsAgectcGfcY3gtywIf7E5MsWSESX5Hi+:h3Exk3meWcGfdlYM0XB

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 64 IoCs

pid	Process
3464	Securaforgeinjector.exe
3464	Securaforgeinjector.exe
3464	Securaforgeinjector.exe
3464	Securaforgeinjector.exe
3464	Securaforgeinjector.exe
3464	Securaforgeinjector.exe
3464	Securaforgeinjector.exe
3464	Securaforgeinjector.exe
3464	Securaforgeinjector.exe
3464	Securaforgeinjector.exe
3464	Securaforgeinjector.exe
3464	Securaforgeinjector.exe
3464	Securaforgeinjector.exe
3464	Securaforgeinjector.exe
3464	Securaforgeinjector.exe
3464	Securaforgeinjector.exe
3464	Securaforgeinjector.exe
3464	Securaforgeinjector.exe
3464	Securaforgeinjector.exe
3464	Securaforgeinjector.exe
4996	Securaforgeinjector.exe
4996	Securaforgeinjector.exe
4996	Securaforgeinjector.exe
4996	Securaforgeinjector.exe
4996	Securaforgeinjector.exe
4996	Securaforgeinjector.exe
4996	Securaforgeinjector.exe
4996	Securaforgeinjector.exe
4996	Securaforgeinjector.exe
4996	Securaforgeinjector.exe
4996	Securaforgeinjector.exe
4996	Securaforgeinjector.exe
4996	Securaforgeinjector.exe
4996	Securaforgeinjector.exe
4996	Securaforgeinjector.exe
4996	Securaforgeinjector.exe
4996	Securaforgeinjector.exe
4996	Securaforgeinjector.exe
4996	Securaforgeinjector.exe
4996	Securaforgeinjector.exe
2368	Securaforgeinjector.exe
2368	Securaforgeinjector.exe
2368	Securaforgeinjector.exe
2368	Securaforgeinjector.exe
2368	Securaforgeinjector.exe
2368	Securaforgeinjector.exe
2368	Securaforgeinjector.exe
2368	Securaforgeinjector.exe
2368	Securaforgeinjector.exe
2368	Securaforgeinjector.exe
2368	Securaforgeinjector.exe
2368	Securaforgeinjector.exe
2368	Securaforgeinjector.exe
2368	Securaforgeinjector.exe
2368	Securaforgeinjector.exe
2368	Securaforgeinjector.exe
2368	Securaforgeinjector.exe
2368	Securaforgeinjector.exe
2368	Securaforgeinjector.exe
2368	Securaforgeinjector.exe
4968	Securaforgeinjector.exe
4968	Securaforgeinjector.exe
4968	Securaforgeinjector.exe
4968	Securaforgeinjector.exe

Checks processor information in registry 2 TTPs 5 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4047565704-754001510-1218967575-1000_Classes\Local Settings	firefox.exe

Suspicious use of AdjustPrivilegeToken 14 IoCs

description	pid	Process
Token: SeDebugPrivilege	4228	firefox.exe
Token: SeDebugPrivilege	4228	firefox.exe
Token: SeDebugPrivilege	4228	firefox.exe
Token: SeDebugPrivilege	4228	firefox.exe
Token: SeDebugPrivilege	4228	firefox.exe
Token: SeDebugPrivilege	4228	firefox.exe
Token: SeDebugPrivilege	4228	firefox.exe
Token: SeDebugPrivilege	4228	firefox.exe
Token: SeDebugPrivilege	4228	firefox.exe
Token: SeDebugPrivilege	4228	firefox.exe
Token: SeDebugPrivilege	4228	firefox.exe
Token: SeDebugPrivilege	4228	firefox.exe
Token: SeDebugPrivilege	4228	firefox.exe
Token: SeDebugPrivilege	4228	firefox.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
4228	firefox.exe
4228	firefox.exe
4228	firefox.exe
4228	firefox.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
4228	firefox.exe
4228	firefox.exe
4228	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4228	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2880 wrote to memory of 3464	2880	Securaforgeinjector.exe	71
PID 2880 wrote to memory of 3464	2880	Securaforgeinjector.exe	71
PID 3464 wrote to memory of 4268	3464	Securaforgeinjector.exe	72
PID 3464 wrote to memory of 4268	3464	Securaforgeinjector.exe	72
PID 3464 wrote to memory of 1380	3464	Securaforgeinjector.exe	74
PID 3464 wrote to memory of 1380	3464	Securaforgeinjector.exe	74
PID 1380 wrote to memory of 5004	1380	cmd.exe	76
PID 1380 wrote to memory of 5004	1380	cmd.exe	76
PID 5004 wrote to memory of 4996	5004	Securaforgeinjector.exe	77
PID 5004 wrote to memory of 4996	5004	Securaforgeinjector.exe	77
PID 4996 wrote to memory of 4396	4996	Securaforgeinjector.exe	78
PID 4996 wrote to memory of 4396	4996	Securaforgeinjector.exe	78
PID 4496 wrote to memory of 4228	4496	firefox.exe	82
PID 4496 wrote to memory of 4228	4496	firefox.exe	82
PID 4496 wrote to memory of 4228	4496	firefox.exe	82
PID 4496 wrote to memory of 4228	4496	firefox.exe	82
PID 4496 wrote to memory of 4228	4496	firefox.exe	82
PID 4496 wrote to memory of 4228	4496	firefox.exe	82
PID 4496 wrote to memory of 4228	4496	firefox.exe	82
PID 4496 wrote to memory of 4228	4496	firefox.exe	82
PID 4496 wrote to memory of 4228	4496	firefox.exe	82
PID 4496 wrote to memory of 4228	4496	firefox.exe	82
PID 4496 wrote to memory of 4228	4496	firefox.exe	82
PID 4996 wrote to memory of 3796	4996	Securaforgeinjector.exe	83
PID 4996 wrote to memory of 3796	4996	Securaforgeinjector.exe	83
PID 3796 wrote to memory of 64	3796	cmd.exe	85
PID 3796 wrote to memory of 64	3796	cmd.exe	85
PID 4228 wrote to memory of 3328	4228	firefox.exe	86
PID 4228 wrote to memory of 3328	4228	firefox.exe	86
PID 64 wrote to memory of 2368	64	Securaforgeinjector.exe	87
PID 64 wrote to memory of 2368	64	Securaforgeinjector.exe	87
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88
PID 4228 wrote to memory of 4084	4228	firefox.exe	88

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
"C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2880
- C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
  "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe"
  2⤵
  - Loads dropped DLL
  - Suspicious use of WriteProcessMemory
  PID:3464
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
    3⤵
    PID:4268
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:1380
  - - C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
      C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
      4⤵
      Suspicious use of WriteProcessMemory
      PID:5004
    - - C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        5⤵
        Loads dropped DLL
        Suspicious use of WriteProcessMemory
        
        PID:4996
      - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        6⤵
        
        PID:4396
      - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:3796
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:64
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        8⤵
        Loads dropped DLL
        
        PID:2368
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        9⤵
        
        PID:3960
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        9⤵
        
        PID:3592
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        10⤵
        
        PID:3156
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        11⤵
        Loads dropped DLL
        
        PID:4968
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        12⤵
        
        PID:3804
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        12⤵
        
        PID:1828
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        13⤵
        
        PID:1104
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        14⤵
        
        PID:1368
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        15⤵
        
        PID:2180
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        15⤵
        
        PID:2032
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        16⤵
        
        PID:1932
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        17⤵
        
        PID:4124
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        18⤵
        
        PID:4596
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        18⤵
        
        PID:2432
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        19⤵
        
        PID:2548
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        20⤵
        
        PID:4664
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        21⤵
        
        PID:4612
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        21⤵
        
        PID:4764
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        22⤵
        
        PID:4640
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        23⤵
        
        PID:5340
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        24⤵
        
        PID:5504
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        24⤵
        
        PID:5560
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        25⤵
        
        PID:5616
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        26⤵
        
        PID:5884
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        27⤵
        
        PID:5964
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        27⤵
        
        PID:6028
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        28⤵
        
        PID:6068
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        29⤵
        
        PID:5304
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        30⤵
        
        PID:5332
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        30⤵
        
        PID:5396
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        31⤵
        
        PID:5432
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        32⤵
        
        PID:5768
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        33⤵
        
        PID:5792
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        33⤵
        
        PID:5832
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        34⤵
        
        PID:5872
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        35⤵
        
        PID:5148
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        36⤵
        
        PID:5284
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        36⤵
        
        PID:5372
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        37⤵
        
        PID:5480
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        38⤵
        
        PID:5792
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        39⤵
        
        PID:5920
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        39⤵
        
        PID:4896
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        40⤵
        
        PID:5980
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        41⤵
        
        PID:4192
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        42⤵
        
        PID:3696
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        42⤵
        
        PID:5652
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        43⤵
        
        PID:5692
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        44⤵
        
        PID:5128
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        45⤵
        
        PID:5176
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        45⤵
        
        PID:1076
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        46⤵
        
        PID:5212
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        47⤵
        
        PID:5648
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        48⤵
        
        PID:2668
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        48⤵
        
        PID:3888
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        49⤵
        
        PID:4504
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        50⤵
        
        PID:3012
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        51⤵
        
        PID:5484
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        51⤵
        
        PID:5492
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        52⤵
        
        PID:5184
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        53⤵
        
        PID:1284
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        54⤵
        
        PID:1660
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        54⤵
        
        PID:3128
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        55⤵
        
        PID:5440
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        56⤵
        
        PID:6136
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        57⤵
        
        PID:5124
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        57⤵
        
        PID:6044
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        58⤵
        
        PID:2484
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        59⤵
        
        PID:4596
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        60⤵
        
        PID:5668
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        60⤵
        
        PID:5964
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        61⤵
        
        PID:5756
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        62⤵
        
        PID:5272
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        63⤵
        
        PID:5056
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        63⤵
        
        PID:724
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        64⤵
        
        PID:2892
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        65⤵
        
        PID:3736
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        66⤵
        
        PID:4720
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        66⤵
        
        PID:6104
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        67⤵
        
        PID:5444
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        68⤵
        
        PID:5448
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        69⤵
        
        PID:4448
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        69⤵
        
        PID:2204
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        70⤵
        
        PID:5500
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        71⤵
        
        PID:5252
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        72⤵
        
        PID:5968
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        72⤵
        
        PID:5808
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        73⤵
        
        PID:780
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        74⤵
        
        PID:1300
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        75⤵
        
        PID:2936
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        75⤵
        
        PID:1924
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        76⤵
        
        PID:5208
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        77⤵
        
        PID:5816
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        78⤵
        
        PID:5076
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        78⤵
        
        PID:6124
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        79⤵
        
        PID:964
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        80⤵
        
        PID:5596
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        81⤵
        
        PID:4208
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        81⤵
        
        PID:4436
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        82⤵
        
        PID:5628
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        83⤵
        
        PID:4208
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        84⤵
        
        PID:2612
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        84⤵
        
        PID:6076
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        85⤵
        
        PID:984
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        86⤵
        
        PID:6080
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        87⤵
        
        PID:6048
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        87⤵
        
        PID:2640
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        88⤵
        
        PID:1500
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        89⤵
        
        PID:3536
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        90⤵
        
        PID:5392
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        90⤵
        
        PID:6156
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        91⤵
        
        PID:6196
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        92⤵
        
        PID:6464
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        93⤵
        
        PID:6488
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        93⤵
        
        PID:6536
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        94⤵
        
        PID:6576
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        95⤵
        
        PID:6844
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        96⤵
        
        PID:6868
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        96⤵
        
        PID:6908
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        97⤵
        
        PID:6948
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        98⤵
        
        PID:6316
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        99⤵
        
        PID:6340
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        99⤵
        
        PID:6384
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        100⤵
        
        PID:6424
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        101⤵
        
        PID:6752
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        102⤵
        
        PID:6784
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        102⤵
        
        PID:6824
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        103⤵
        
        PID:6872
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        104⤵
        
        PID:6208
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        105⤵
        
        PID:6240
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        105⤵
        
        PID:6300
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        106⤵
        
        PID:6360
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        107⤵
        
        PID:6732
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        108⤵
        
        PID:6764
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        108⤵
        
        PID:6784
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        109⤵
        
        PID:6876
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        110⤵
        
        PID:4768
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        111⤵
        
        PID:1100
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        111⤵
        
        PID:6400
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        112⤵
        
        PID:6500
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        113⤵
        
        PID:2288
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        114⤵
        
        PID:7004
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        114⤵
        
        PID:7048
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        115⤵
        
        PID:7088
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        116⤵
        
        PID:6612
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        117⤵
        
        PID:6636
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        117⤵
        
        PID:6664
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        118⤵
        
        PID:6716
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        119⤵
        
        PID:6244
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        120⤵
        
        PID:5336
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        120⤵
        
        PID:6368
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        121⤵
        
        PID:6488
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        122⤵
        
        PID:7144
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        123⤵
        
        PID:6048
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        123⤵
        
        PID:6224
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        124⤵
        
        PID:5336
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        125⤵
        
        PID:7132
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        126⤵
        
        PID:6204
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        126⤵
        
        PID:4832
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        127⤵
        
        PID:6620
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        128⤵
        
        PID:6656
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        129⤵
        
        PID:6820
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        129⤵
        
        PID:6808
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        130⤵
        
        PID:6972
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        131⤵
        
        PID:7156
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        132⤵
        
        PID:6148
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        132⤵
        
        PID:3696
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        133⤵
        
        PID:7040
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        134⤵
        
        PID:5880
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        135⤵
        
        PID:4008
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        135⤵
        
        PID:7152
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        136⤵
        
        PID:6048
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        137⤵
        
        PID:5124
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        138⤵
        
        PID:6724
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        138⤵
        
        PID:4976
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        139⤵
        
        PID:6724
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        140⤵
        
        PID:7128
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        141⤵
        
        PID:5452
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        141⤵
        
        PID:7204
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        142⤵
        
        PID:7244
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        143⤵
        
        PID:7512
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        144⤵
        
        PID:7540
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        144⤵
        
        PID:7584
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        145⤵
        
        PID:7624
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        146⤵
        
        PID:7892
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        147⤵
        
        PID:7916
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        147⤵
        
        PID:7956
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        148⤵
        
        PID:7996
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        149⤵
        
        PID:7272
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        150⤵
        
        PID:7296
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        150⤵
        
        PID:7344
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        151⤵
        
        PID:7388
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        152⤵
        
        PID:7728
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        153⤵
        
        PID:7756
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        153⤵
        
        PID:7808
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        154⤵
        
        PID:7848
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        155⤵
        
        PID:8184
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        156⤵
        
        PID:7176
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        156⤵
        
        PID:7256
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        157⤵
        
        PID:7296
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        158⤵
        
        PID:7716
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        159⤵
        
        PID:7760
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        159⤵
        
        PID:7860
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        160⤵
        
        PID:7940
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        161⤵
        
        PID:5144
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        162⤵
        
        PID:7392
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        162⤵
        
        PID:7452
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        163⤵
        
        PID:7492
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        164⤵
        
        PID:7776
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        165⤵
        
        PID:7920
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        165⤵
        
        PID:8048
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        166⤵
        
        PID:8080
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        167⤵
        
        PID:7560
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        168⤵
        
        PID:2760
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        168⤵
        
        PID:7672
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        169⤵
        
        PID:7700
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        170⤵
        
        PID:8104
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        171⤵
        
        PID:8136
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        171⤵
        
        PID:6852
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        172⤵
        
        PID:6900
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        173⤵
        
        PID:6256
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        174⤵
        
        PID:6420
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        174⤵
        
        PID:6504
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        175⤵
        
        PID:8004
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        176⤵
        
        PID:6328
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        177⤵
        
        PID:6692
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        177⤵
        
        PID:1504
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        178⤵
        
        PID:6252
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        179⤵
        
        PID:7392
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        180⤵
        
        PID:7520
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        180⤵
        
        PID:5672
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        181⤵
        
        PID:6592
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        182⤵
        
        PID:7436
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        183⤵
        
        PID:7552
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        183⤵
        
        PID:7660
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        184⤵
        
        PID:6452
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        185⤵
        
        PID:4900
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        186⤵
        
        PID:6584
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        186⤵
        
        PID:8052
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        187⤵
        
        PID:8152
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        188⤵
        
        PID:7176
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        189⤵
        
        PID:7424
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        189⤵
        
        PID:7520
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        190⤵
        
        PID:7104
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        191⤵
        
        PID:7544
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        192⤵
        
        PID:7428
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        192⤵
        
        PID:6812
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        193⤵
        
        PID:8144
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        194⤵
        
        PID:7580
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        195⤵
        
        PID:7024
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        195⤵
        
        PID:6516
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        196⤵
        
        PID:2936
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        197⤵
        
        PID:6624
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        198⤵
        
        PID:6992
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        198⤵
        
        PID:5356
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        199⤵
        
        PID:6584
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        200⤵
        
        PID:8456
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        201⤵
        
        PID:8480
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        201⤵
        
        PID:8528
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        202⤵
        
        PID:8568
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        203⤵
        
        PID:8840
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        204⤵
        
        PID:8864
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        204⤵
        
        PID:8960
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        205⤵
        
        PID:9000
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        206⤵
        
        PID:8256
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        207⤵
        
        PID:8280
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        207⤵
        
        PID:8320
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        208⤵
        
        PID:8360
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        209⤵
        
        PID:8688
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        210⤵
        
        PID:8712
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        210⤵
        
        PID:8752
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        211⤵
        
        PID:8792
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        212⤵
        
        PID:9044
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        213⤵
        
        PID:9068
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        213⤵
        
        PID:9104
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        214⤵
        
        PID:9148
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        215⤵
        
        PID:7260
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        216⤵
        
        PID:8508
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        216⤵
        
        PID:8596
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        217⤵
        
        PID:8640
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        218⤵
        
        PID:7864
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        219⤵
        
        PID:7312
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        219⤵
        
        PID:9024
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        220⤵
        
        PID:9084
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        221⤵
        
        PID:8464
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        222⤵
        
        PID:8516
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        222⤵
        
        PID:3300
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        223⤵
        
        PID:8684
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        224⤵
        
        PID:6860
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        225⤵
        
        PID:9160
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        225⤵
        
        PID:9204
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        226⤵
        
        PID:8240
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        227⤵
        
        PID:8824
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        228⤵
        
        PID:7992
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        228⤵
        
        PID:7412
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        229⤵
        
        PID:7308
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        230⤵
        
        PID:8592
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        231⤵
        
        PID:8736
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        231⤵
        
        PID:8820
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        232⤵
        
        PID:7524
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        233⤵
        
        PID:7736
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        234⤵
        
        PID:9192
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        234⤵
        
        PID:8284
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        235⤵
        
        PID:8328
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        236⤵
        
        PID:6896
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        237⤵
        
        PID:6688
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        237⤵
        
        PID:5640
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        238⤵
        
        PID:7368
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        239⤵
        
        PID:8720
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        240⤵
        
        PID:6792
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        240⤵
        
        PID:8096
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        241⤵
        
        PID:6216
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        242⤵
        
        PID:8516
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        243⤵
        
        PID:6336
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        243⤵
        
        PID:8760
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        244⤵
        
        PID:5632
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        245⤵
        
        PID:7240
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        246⤵
        
        PID:1068
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        246⤵
        
        PID:7880
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        247⤵
        
        PID:8024
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        248⤵
        
        PID:8548
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        249⤵
        
        PID:7604
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        249⤵
        
        PID:8712
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        250⤵
        
        PID:6636
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        251⤵
        
        PID:7604
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        252⤵
        
        PID:8732
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        252⤵
        
        PID:8972
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        253⤵
        
        PID:8268
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        254⤵
        
        PID:8396
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        255⤵
        
        PID:8412
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        255⤵
        
        PID:4776
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        256⤵
        
        PID:7224
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        257⤵
        
        PID:8232
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        258⤵
        
        PID:5716
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        258⤵
        
        PID:8408
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        259⤵
        
        PID:6336
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        260⤵
        
        PID:9172
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        261⤵
        
        PID:8436
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        261⤵
        
        PID:9008
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        262⤵
        
        PID:7364
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        263⤵
        
        PID:9020
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        264⤵
        
        PID:8788
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        264⤵
        
        PID:8636
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        265⤵
        
        PID:8716
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        266⤵
        
        PID:7328
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        267⤵
        
        PID:8788
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        267⤵
        
        PID:7888
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        268⤵
        
        PID:8808
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        269⤵
        
        PID:9452
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        270⤵
        
        PID:9480
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        270⤵
        
        PID:9524
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        271⤵
        
        PID:9564
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        272⤵
        
        PID:9832
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        273⤵
        
        PID:9856
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        273⤵
        
        PID:9896
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        274⤵
        
        PID:9936
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        275⤵
        
        PID:10204
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        276⤵
        
        PID:10228
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        276⤵
        
        PID:9244
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        277⤵
        
        PID:9284
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        278⤵
        
        PID:9624
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        279⤵
        
        PID:9652
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        279⤵
        
        PID:9692
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        280⤵
        
        PID:9732
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        281⤵
        
        PID:10064
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        282⤵
        
        PID:10084
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        282⤵
        
        PID:7548
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        283⤵
        
        PID:10152
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        284⤵
        
        PID:8112
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        285⤵
        
        PID:9500
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        285⤵
        
        PID:9588
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        286⤵
        
        PID:9636
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        287⤵
        
        PID:10072
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        288⤵
        
        PID:10100
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        288⤵
        
        PID:9240
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        289⤵
        
        PID:9220
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        290⤵
        
        PID:6172
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        291⤵
        
        PID:928
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        291⤵
        
        PID:7424
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        292⤵
        
        PID:5668
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        293⤵
        
        PID:10012
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        294⤵
        
        PID:10032
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        294⤵
        
        PID:9224
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        295⤵
        
        PID:8064
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        296⤵
        
        PID:7420
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        297⤵
        
        PID:8296
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        297⤵
        
        PID:7680
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        298⤵
        
        PID:9984
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        299⤵
        
        PID:10040
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        300⤵
        
        PID:9296
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        300⤵
        
        PID:9348
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        301⤵
        
        PID:9392
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        302⤵
        
        PID:9868
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        303⤵
        
        PID:9812
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        303⤵
        
        PID:9872
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        304⤵
        
        PID:9972
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        305⤵
        
        PID:9484
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        306⤵
        
        PID:9688
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        306⤵
        
        PID:8520
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        307⤵
        
        PID:7656
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        308⤵
        
        PID:9320
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        309⤵
        
        PID:3492
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        309⤵
        
        PID:9416
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        310⤵
        
        PID:9480
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        311⤵
        
        PID:9572
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        312⤵
        
        PID:2760
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        312⤵
        
        PID:8544
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        313⤵
        
        PID:9840
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        314⤵
        
        PID:10144
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        315⤵
        
        PID:9652
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        315⤵
        
        PID:9436
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        316⤵
        
        PID:9448
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        317⤵
        
        PID:9264
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        318⤵
        
        PID:9744
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        318⤵
        
        PID:9652
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        319⤵
        
        PID:2760
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        320⤵
        
        PID:9608
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        321⤵
        
        PID:9064
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        321⤵
        
        PID:8708
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        322⤵
        
        PID:216
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        323⤵
        
        PID:9124
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        324⤵
        
        PID:8680
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        324⤵
        
        PID:9932
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        325⤵
        
        PID:9740
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        326⤵
        
        PID:9916
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        327⤵
        
        PID:9580
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        327⤵
        
        PID:9812
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        328⤵
        
        PID:9176
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        329⤵
        
        PID:9876
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        330⤵
        
        PID:9160
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        330⤵
        
        PID:9580
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        331⤵
        
        PID:8252
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        332⤵
        
        PID:6392
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        333⤵
        
        PID:7916
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        333⤵
        
        PID:9584
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        334⤵
        
        PID:9860
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        335⤵
        
        PID:10508
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        336⤵
        
        PID:10540
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        336⤵
        
        PID:10580
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        337⤵
        
        PID:10620
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        338⤵
        
        PID:10896
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        339⤵
        
        PID:10920
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        339⤵
        
        PID:10960
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        340⤵
        
        PID:11000
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        341⤵
        
        PID:10268
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        342⤵
        
        PID:10296
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        342⤵
        
        PID:10340
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        343⤵
        
        PID:10388
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        344⤵
        
        PID:10692
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        345⤵
        
        PID:8924
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        345⤵
        
        PID:10752
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        346⤵
        
        PID:10796
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        347⤵
        
        PID:11152
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        348⤵
        
        PID:11176
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        348⤵
        
        PID:11216
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        349⤵
        
        PID:11256
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        350⤵
        
        PID:10544
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        351⤵
        
        PID:10548
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        351⤵
        
        PID:10672
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        352⤵
        
        PID:10720
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        353⤵
        
        PID:11056
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        354⤵
        
        PID:9228
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        354⤵
        
        PID:9960
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        355⤵
        
        PID:5168
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        356⤵
        
        PID:10504
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        357⤵
        
        PID:8564
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        357⤵
        
        PID:10592
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        358⤵
        
        PID:9472
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        359⤵
        
        PID:10940
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        360⤵
        
        PID:10972
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        360⤵
        
        PID:9604
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        361⤵
        
        PID:11208
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        362⤵
        
        PID:10076
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        363⤵
        
        PID:9644
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        363⤵
        
        PID:10680
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        364⤵
        
        PID:10744
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        365⤵
        
        PID:9308
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        366⤵
        
        PID:9088
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        366⤵
        
        PID:9112
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        367⤵
        
        PID:10320
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        368⤵
        
        PID:9644
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        369⤵
        
        PID:10664
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        369⤵
        
        PID:10824
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        370⤵
        
        PID:10876
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        371⤵
        
        PID:10324
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        372⤵
        
        PID:10396
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        372⤵
        
        PID:10444
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        373⤵
        
        PID:10484
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        374⤵
        
        PID:9792
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        375⤵
        
        PID:7220
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        375⤵
        
        PID:9168
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        376⤵
        
        PID:8160
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        377⤵
        
        PID:11028
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        378⤵
        
        PID:9432
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        378⤵
        
        PID:7916
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        379⤵
        
        PID:10640
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        380⤵
        
        PID:9412
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        381⤵
        
        PID:10740
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        381⤵
        
        PID:10356
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        382⤵
        
        PID:9804
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        383⤵
        
        PID:9912
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        384⤵
        
        PID:872
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        384⤵
        
        PID:10932
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        385⤵
        
        PID:10792
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        386⤵
        
        PID:872
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        387⤵
        
        PID:10740
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        387⤵
        
        PID:7384
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        388⤵
        
        PID:7220
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        389⤵
        
        PID:10088
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        390⤵
        
        PID:2476
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        390⤵
        
        PID:8744
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        391⤵
        
        PID:10428
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        392⤵
        
        PID:10576
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        393⤵
        
        PID:9576
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        393⤵
        
        PID:10768
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        394⤵
        
        PID:9232
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        395⤵
        
        PID:3572
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        396⤵
        
        PID:10252
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        396⤵
        
        PID:10060
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        397⤵
        
        PID:10652
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        398⤵
        
        PID:8412
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        399⤵
        
        PID:2476
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        399⤵
        
        PID:10572
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        400⤵
        
        PID:9560
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        401⤵
        
        PID:9852
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        402⤵
        
        PID:11044
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        402⤵
        
        PID:9632
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        403⤵
        
        PID:200
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        404⤵
        
        PID:11528
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        405⤵
        
        PID:11556
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        405⤵
        
        PID:11600
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        406⤵
        
        PID:11640
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        407⤵
        
        PID:11908
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        408⤵
        
        PID:11932
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        408⤵
        
        PID:12000
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        409⤵
        
        PID:12040
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        410⤵
        
        PID:11304
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        411⤵
        
        PID:11336
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        411⤵
        
        PID:11384
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        412⤵
        
        PID:11424
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        413⤵
        
        PID:11764
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        414⤵
        
        PID:11784
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        414⤵
        
        PID:11832
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        415⤵
        
        PID:11872
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        416⤵
        
        PID:12172
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        417⤵
        
        PID:12220
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        417⤵
        
        PID:12248
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        418⤵
        
        PID:12272
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        419⤵
        
        PID:11588
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        420⤵
        
        PID:11668
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        420⤵
        
        PID:11704
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        421⤵
        
        PID:11752
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        422⤵
        
        PID:12124
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        423⤵
        
        PID:12160
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        423⤵
        
        PID:12228
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        424⤵
        
        PID:11272
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        425⤵
        
        PID:8724
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        426⤵
        
        PID:11672
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        426⤵
        
        PID:11828
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        427⤵
        
        PID:11844
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        428⤵
        
        PID:10864
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        429⤵
        
        PID:11296
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        429⤵
        
        PID:10216
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        430⤵
        
        PID:11432
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        431⤵
        
        PID:12052
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        432⤵
        
        PID:12088
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        432⤵
        
        PID:12152
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        433⤵
        
        PID:9068
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        434⤵
        
        PID:10884
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        435⤵
        
        PID:10560
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        435⤵
        
        PID:10496
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        436⤵
        
        PID:11896
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        437⤵
        
        PID:11488
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        438⤵
        
        PID:11512
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        438⤵
        
        PID:11564
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        439⤵
        
        PID:7464
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        440⤵
        
        PID:11312
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        441⤵
        
        PID:10292
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        441⤵
        
        PID:11524
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        442⤵
        
        PID:11072
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        443⤵
        
        PID:10684
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        444⤵
        
        PID:11276
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        444⤵
        
        PID:10904
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        445⤵
        
        PID:11468
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        446⤵
        
        PID:8924
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        447⤵
        
        PID:11348
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        447⤵
        
        PID:11592
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        448⤵
        
        PID:9788
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        449⤵
        
        PID:11200
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        450⤵
        
        PID:10560
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        450⤵
        
        PID:8616
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        451⤵
        
        PID:10728
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        452⤵
        
        PID:9364
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        453⤵
        
        PID:9648
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        453⤵
        
        PID:9508
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        454⤵
        
        PID:11340
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        455⤵
        
        PID:11444
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        456⤵
        
        PID:11852
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        456⤵
        
        PID:12268
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        457⤵
        
        PID:10220
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        458⤵
        
        PID:9376
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        459⤵
        
        PID:6864
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        459⤵
        
        PID:8856
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        460⤵
        
        PID:12076
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        461⤵
        
        PID:12452
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        462⤵
        
        PID:12488
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        462⤵
        
        PID:12528
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        463⤵
        
        PID:12568
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        464⤵
        
        PID:12836
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        465⤵
        
        PID:12868
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        465⤵
        
        PID:12916
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        466⤵
        
        PID:12956
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        467⤵
        
        PID:13224
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        468⤵
        
        PID:13252
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        468⤵
        
        PID:13292
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        469⤵
        
        PID:11948
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        470⤵
        
        PID:12624
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        471⤵
        
        PID:12660
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        471⤵
        
        PID:12700
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        472⤵
        
        PID:12740
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        473⤵
        
        PID:13052
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        474⤵
        
        PID:13080
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        474⤵
        
        PID:13128
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        475⤵
        
        PID:13168
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        476⤵
        
        PID:12432
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        477⤵
        
        PID:12376
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        477⤵
        
        PID:12460
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        478⤵
        
        PID:12488
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        479⤵
        
        PID:12892
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        480⤵
        
        PID:12904
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        480⤵
        
        PID:12996
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        481⤵
        
        PID:13036
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        482⤵
        
        PID:3488
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        483⤵
        
        PID:12324
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        483⤵
        
        PID:10024
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        484⤵
        
        PID:12396
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        485⤵
        
        PID:12980
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        486⤵
        
        PID:13088
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        486⤵
        
        PID:8400
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        487⤵
        
        PID:12328
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        488⤵
        
        PID:11012
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        489⤵
        
        PID:13212
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        489⤵
        
        PID:13252
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        490⤵
        
        PID:3604
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        491⤵
        
        PID:11356
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        492⤵
        
        PID:11472
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        492⤵
        
        PID:11320
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        493⤵
        
        PID:11036
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        494⤵
        
        PID:12376
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        495⤵
        
        PID:11548
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        495⤵
        
        PID:12592
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        496⤵
        
        PID:9408
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        497⤵
        
        PID:13108
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        498⤵
        
        PID:13176
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        498⤵
        
        PID:13276
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        499⤵
        
        PID:13288
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        500⤵
        
        PID:11448
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        501⤵
        
        PID:12832
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        501⤵
        
        PID:12988
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        502⤵
        
        PID:13084
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        503⤵
        
        PID:11316
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        504⤵
        
        PID:12744
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        504⤵
        
        PID:11276
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        505⤵
        
        PID:10304
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        506⤵
        
        PID:12048
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        507⤵
        
        PID:12764
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        507⤵
        
        PID:12744
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        508⤵
        
        PID:12952
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        509⤵
        
        PID:12752
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        510⤵
        
        PID:13088
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        510⤵
        
        PID:9388
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        511⤵
        
        PID:9576
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        512⤵
        
        PID:12684
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        513⤵
        
        PID:11652
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        513⤵
        
        PID:13272
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        514⤵
        
        PID:12520
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        515⤵
        
        PID:12304
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        516⤵
        
        PID:11952
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        516⤵
        
        PID:12548
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        517⤵
        
        PID:12508
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        518⤵
        
        PID:12096
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        519⤵
        
        PID:11952
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        519⤵
        
        PID:13352
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        520⤵
        
        PID:13392
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        521⤵
        
        PID:13660
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        522⤵
        
        PID:13684
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        522⤵
        
        PID:13736
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        523⤵
        
        PID:13776
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        524⤵
        
        PID:14044
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        525⤵
        
        PID:14072
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        525⤵
        
        PID:14140
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        526⤵
        
        PID:14180
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        527⤵
        
        PID:13452
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        528⤵
        
        PID:13484
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        528⤵
        
        PID:13524
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        529⤵
        
        PID:13564
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        530⤵
        
        PID:13884
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        531⤵
        
        PID:13908
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        531⤵
        
        PID:13952
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        532⤵
        
        PID:13992
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        533⤵
        
        PID:14296
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        534⤵
        
        PID:13336
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        534⤵
        
        PID:12716
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        535⤵
        
        PID:13416
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        536⤵
        
        PID:13748
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        537⤵
        
        PID:13812
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        537⤵
        
        PID:13864
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        538⤵
        
        PID:13908
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        539⤵
        
        PID:14288
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        540⤵
        
        PID:12020
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        540⤵
        
        PID:13444
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        541⤵
        
        PID:13488
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        542⤵
        
        PID:13960
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        543⤵
        
        PID:14036
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        543⤵
        
        PID:12368
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        544⤵
        
        PID:12492
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        545⤵
        
        PID:13668
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        546⤵
        
        PID:13724
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        546⤵
        
        PID:13700
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        547⤵
        
        PID:8428
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        548⤵
        
        PID:13324
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        549⤵
        
        PID:13636
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        549⤵
        
        PID:13684
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        550⤵
        
        PID:13828
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        551⤵
        
        PID:10776
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        552⤵
        
        PID:8664
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        552⤵
        
        PID:12668
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        553⤵
        
        PID:12292
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        554⤵
        
        PID:14232
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        555⤵
        
        PID:14244
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        555⤵
        
        PID:13328
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        556⤵
        
        PID:11404
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        557⤵
        
        PID:9848
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        558⤵
        
        PID:14212
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        558⤵
        
        PID:14244
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        559⤵
        
        PID:10424
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        560⤵
        
        PID:14248
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        561⤵
        
        PID:11788
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        561⤵
        
        PID:10044
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        562⤵
        
        PID:13648
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        563⤵
        
        PID:14112
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        564⤵
        
        PID:14256
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        564⤵
        
        PID:14236
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        565⤵
        
        PID:12852
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        566⤵
        
        PID:13916
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        567⤵
        
        PID:14032
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        567⤵
        
        PID:14308
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        568⤵
        
        PID:13848
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        569⤵
        
        PID:14636
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        570⤵
        
        PID:14660
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        570⤵
        
        PID:14700
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        571⤵
        
        PID:14740
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        572⤵
        
        PID:15012
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        573⤵
        
        PID:15036
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        573⤵
        
        PID:15076
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        574⤵
        
        PID:15116
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        575⤵
        
        PID:12324
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        576⤵
        
        PID:14356
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        576⤵
        
        PID:11816
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        577⤵
        
        PID:14476
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        578⤵
        
        PID:14748
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        579⤵
        
        PID:14792
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        579⤵
        
        PID:14836
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        580⤵
        
        PID:14880
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        581⤵
        
        PID:15220
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        582⤵
        
        PID:15244
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        582⤵
        
        PID:15304
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        583⤵
        
        PID:15344
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        584⤵
        
        PID:14616
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        585⤵
        
        PID:14648
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        585⤵
        
        PID:14816
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        586⤵
        
        PID:14908
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        587⤵
        
        PID:15288
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        588⤵
        
        PID:15272
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        588⤵
        
        PID:8588
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        589⤵
        
        PID:12608
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        590⤵
        
        PID:14008
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        591⤵
        
        PID:13932
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        591⤵
        
        PID:14992
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        592⤵
        
        PID:15088
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        593⤵
        
        PID:14400
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        594⤵
        
        PID:14416
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        594⤵
        
        PID:14520
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        595⤵
        
        PID:14588
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        596⤵
        
        PID:12316
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        597⤵
        
        PID:15208
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        597⤵
        
        PID:15244
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        598⤵
        
        PID:15320
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        599⤵
        
        PID:11800
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        600⤵
        
        PID:15124
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        600⤵
        
        PID:15168
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        601⤵
        
        PID:15212
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        602⤵
        
        PID:14952
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        603⤵
        
        PID:12796
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        603⤵
        
        PID:15156
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        604⤵
        
        PID:15252
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        605⤵
        
        PID:13088
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        606⤵
        
        PID:14480
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        606⤵
        
        PID:14416
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        607⤵
        
        PID:13540
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        608⤵
        
        PID:14420
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        609⤵
        
        PID:14648
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        609⤵
        
        PID:13984
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        610⤵
        
        PID:14820
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        611⤵
        
        PID:12764
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        612⤵
        
        PID:12676
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        612⤵
        
        PID:14268
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        613⤵
        
        PID:13964
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        614⤵
        
        PID:13832
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        615⤵
        
        PID:13016
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        615⤵
        
        PID:14380
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        616⤵
        
        PID:13820
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        617⤵
        
        PID:13796
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        618⤵
        
        PID:13844
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        618⤵
        
        PID:5040
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        619⤵
        
        PID:12468
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        620⤵
        
        PID:11664
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        621⤵
        
        PID:14256
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        621⤵
        
        PID:15404
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        622⤵
        
        PID:15444
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        623⤵
        
        PID:15716
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        624⤵
        
        PID:15752
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        624⤵
        
        PID:15796
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        625⤵
        
        PID:15836
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        626⤵
        
        PID:16112
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        627⤵
        
        PID:16140
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        627⤵
        
        PID:16184
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        628⤵
        
        PID:16224
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        629⤵
        
        PID:15612
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        630⤵
        
        PID:15684
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        630⤵
        
        PID:15756
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        631⤵
        
        PID:15860
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        632⤵
        
        PID:16140
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        633⤵
        
        PID:16148
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        633⤵
        
        PID:16288
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        634⤵
        
        PID:16328
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        635⤵
        
        PID:14876
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        636⤵
        
        PID:12712
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        636⤵
        
        PID:15588
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        637⤵
        
        PID:15704
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        638⤵
        
        PID:16084
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        639⤵
        
        PID:16120
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        639⤵
        
        PID:13680
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        640⤵
        
        PID:12588
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        641⤵
        
        PID:15240
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        642⤵
        
        PID:15516
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        642⤵
        
        PID:16012
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        643⤵
        
        PID:16056
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        644⤵
        
        PID:13164
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        645⤵
        
        PID:14424
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        645⤵
        
        PID:15264
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        646⤵
        
        PID:14156
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        647⤵
        
        PID:15464
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        648⤵
        
        PID:16120
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        648⤵
        
        PID:16300
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        649⤵
        
        PID:15364
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        650⤵
        
        PID:14544
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        651⤵
        
        PID:12092
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        651⤵
        
        PID:14464
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        652⤵
        
        PID:14204
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        653⤵
        
        PID:15488
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        654⤵
        
        PID:14064
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        654⤵
        
        PID:16244
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        655⤵
        
        PID:14024
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        656⤵
        
        PID:16032
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        657⤵
        
        PID:16164
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        657⤵
        
        PID:14716
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        658⤵
        
        PID:14780
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        659⤵
        
        PID:14652
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        660⤵
        
        PID:14712
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        660⤵
        
        PID:13308
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        661⤵
        
        PID:15712
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        662⤵
        
        PID:16556
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        663⤵
        
        PID:16628
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        663⤵
        
        PID:16672
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        664⤵
        
        PID:16712
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        665⤵
        
        PID:16980
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        666⤵
        
        PID:17004
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        666⤵
        
        PID:17044
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        667⤵
        
        PID:17084
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        668⤵
        
        PID:17352
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        669⤵
        
        PID:17376
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        669⤵
        
        PID:13336
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        670⤵
        
        PID:14644
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        671⤵
        
        PID:16528
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        672⤵
        
        PID:15660
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        672⤵
        
        PID:16612
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        673⤵
        
        PID:16632
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        674⤵
        
        PID:16964
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        675⤵
        
        PID:17016
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        675⤵
        
        PID:17096
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        676⤵
        
        PID:17140
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        677⤵
        
        PID:17404
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        678⤵
        
        PID:14548
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        678⤵
        
        PID:12772
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        679⤵
        
        PID:16420
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        680⤵
        
        PID:16824
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        681⤵
        
        PID:16848
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        681⤵
        
        PID:16940
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        682⤵
        
        PID:17024
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        683⤵
        
        PID:17400
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        684⤵
        
        PID:14624
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        684⤵
        
        PID:16096
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        685⤵
        
        PID:12092
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        686⤵
        
        PID:16792
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        687⤵
        
        PID:16868
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        687⤵
        
        PID:16864
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        688⤵
        
        PID:15388
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        689⤵
        
        PID:12824
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        690⤵
        
        PID:14460
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        690⤵
        
        PID:16132
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        691⤵
        
        PID:16492
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        692⤵
        
        PID:17016
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        693⤵
        
        PID:17176
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        693⤵
        
        PID:17208
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        694⤵
        
        PID:17252
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        695⤵
        
        PID:15660
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        696⤵
        
        PID:16628
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        696⤵
        
        PID:16752
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        697⤵
        
        PID:16776
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        698⤵
        
        PID:16660
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        699⤵
        
        PID:14756
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        699⤵
        
        PID:17264
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        700⤵
        
        PID:17308
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        701⤵
        
        PID:16200
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        702⤵
        
        PID:14432
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        702⤵
        
        PID:15340
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        703⤵
        
        PID:16708
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        704⤵
        
        PID:8584
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        705⤵
        
        PID:16744
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        705⤵
        
        PID:14324
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        706⤵
        
        PID:15424
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        707⤵
        
        PID:16724
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        708⤵
        
        PID:16796
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        708⤵
        
        PID:14756
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        709⤵
        
        PID:17344
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        710⤵
        
        PID:16508
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        711⤵
        
        PID:14860
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        711⤵
        
        PID:17380
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        712⤵
        
        PID:12360
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        713⤵
        
        PID:16524
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        714⤵
        
        PID:16512
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        714⤵
        
        PID:14860
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        715⤵
        
        PID:16896
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        716⤵
        
        PID:17500
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        717⤵
        
        PID:17524
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        717⤵
        
        PID:17564
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        718⤵
        
        PID:17604
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        719⤵
        
        PID:17872
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        720⤵
        
        PID:17900
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        720⤵
        
        PID:17940
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        721⤵
        
        PID:17980
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        722⤵
        
        PID:18252
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        723⤵
        
        PID:18280
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        723⤵
        
        PID:18324
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        724⤵
        
        PID:18364
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        725⤵
        
        PID:17548
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        726⤵
        
        PID:17616
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        726⤵
        
        PID:17664
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        727⤵
        
        PID:17708
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        728⤵
        
        PID:18052
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        729⤵
        
        PID:18080
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        729⤵
        
        PID:18120
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        730⤵
        
        PID:18164
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        731⤵
        
        PID:16992
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        732⤵
        
        PID:17424
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        732⤵
        
        PID:17636
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        733⤵
        
        PID:17748
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        734⤵
        
        PID:18080
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        735⤵
        
        PID:18192
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        735⤵
        
        PID:15052
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        736⤵
        
        PID:18320
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        737⤵
        
        PID:14104
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        738⤵
        
        PID:16128
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        738⤵
        
        PID:16520
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        739⤵
        
        PID:17268
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        740⤵
        
        PID:18084
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        741⤵
        
        PID:18196
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        741⤵
        
        PID:18280
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        742⤵
        
        PID:18408
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        743⤵
        
        PID:16812
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        744⤵
        
        PID:17776
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        744⤵
        
        PID:17856
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        745⤵
        
        PID:17916
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        746⤵
        
        PID:17440
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        747⤵
        
        PID:17472
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        747⤵
        
        PID:13048
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        748⤵
        
        PID:15268
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        749⤵
        
        PID:18420
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        750⤵
        
        PID:17116
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        750⤵
        
        PID:17412
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        751⤵
        
        PID:16880
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        752⤵
        
        PID:18132
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        753⤵
        
        PID:18220
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        753⤵
        
        PID:16640
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        754⤵
        
        PID:16564
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        755⤵
        
        PID:17372
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        756⤵
        
        PID:18220
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        756⤵
        
        PID:17472
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        757⤵
        
        PID:16476
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        758⤵
        
        PID:17780
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c python pip install threading, sys, sqlite3, re, bsae64, json, ctypes, urllib, time, shutil, zipfile, random, subprocess, uuidm socket, getpass, ssl, crypto
        759⤵
        
        PID:17812
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome"
        759⤵
        
        PID:17064
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        760⤵
        
        PID:16996
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe
        
        C:\Users\Admin\AppData\Local\Temp\Securaforgeinjector.exe -m pip install pycryptodome
        761⤵
        
        PID:16692

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4496
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4228
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4228.0.316034281\1677553709" -parentBuildID 20221007134813 -prefsHandle 1644 -prefMapHandle 1632 -prefsLen 20936 -prefMapSize 232675 -appDir "C:\Program Files\Mozilla Firefox\browser" - {424a4c43-52dc-4094-a8f0-606683b946ad} 4228 "\\.\pipe\gecko-crash-server-pipe.4228" 1732 1dc8fcce158 gpu
    3⤵
    PID:3328
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4228.1.824981144\942926896" -parentBuildID 20221007134813 -prefsHandle 2104 -prefMapHandle 2100 -prefsLen 21017 -prefMapSize 232675 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f8dbf8d9-44a4-4f22-9146-9ed016a30493} 4228 "\\.\pipe\gecko-crash-server-pipe.4228" 2116 1dc8f433258 socket
    3⤵
    PID:4084
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4228.2.1848049865\1752221481" -childID 1 -isForBrowser -prefsHandle 2952 -prefMapHandle 2660 -prefsLen 21055 -prefMapSize 232675 -jsInitHandle 1068 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {cac116ac-e05d-4c28-b56b-96eac3cbe39c} 4228 "\\.\pipe\gecko-crash-server-pipe.4228" 2672 1dc8fc5a758 tab
    3⤵
    PID:4112
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4228.3.1487849690\1978299389" -childID 2 -isForBrowser -prefsHandle 3256 -prefMapHandle 3252 -prefsLen 26480 -prefMapSize 232675 -jsInitHandle 1068 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b34c3023-7b3a-415d-b422-7b178e7343c6} 4228 "\\.\pipe\gecko-crash-server-pipe.4228" 2428 1dc90ef5858 tab
    3⤵
    PID:1352
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4228.4.163593751\1874242763" -childID 3 -isForBrowser -prefsHandle 3672 -prefMapHandle 3668 -prefsLen 26480 -prefMapSize 232675 -jsInitHandle 1068 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b0f2849b-f41f-4490-be77-c9987e707fe1} 4228 "\\.\pipe\gecko-crash-server-pipe.4228" 3696 1dc84762858 tab
    3⤵
    PID:5100
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4228.5.833564582\245502977" -childID 4 -isForBrowser -prefsHandle 4852 -prefMapHandle 4848 -prefsLen 26620 -prefMapSize 232675 -jsInitHandle 1068 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {494cff0e-0a58-4a7b-848a-42b50ce11c87} 4228 "\\.\pipe\gecko-crash-server-pipe.4228" 4860 1dc9106d758 tab
    3⤵
    PID:4844
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4228.7.1679848925\792916900" -childID 6 -isForBrowser -prefsHandle 5016 -prefMapHandle 4908 -prefsLen 26620 -prefMapSize 232675 -jsInitHandle 1068 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {7820ae9e-b407-4d0d-bfef-bd846d15d7a8} 4228 "\\.\pipe\gecko-crash-server-pipe.4228" 5108 1dc95aa6658 tab
    3⤵
    PID:4116
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4228.6.229893579\1344527844" -childID 5 -isForBrowser -prefsHandle 4868 -prefMapHandle 4820 -prefsLen 26620 -prefMapSize 232675 -jsInitHandle 1068 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2a1f9e57-c521-4ba6-9f05-02437d1c804f} 4228 "\\.\pipe\gecko-crash-server-pipe.4228" 4908 1dc95aa4258 tab
    3⤵
    PID:4036

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1txvui6d.default-release\activity-stream.discovery_stream.json.tmp

Filesize
22KB

MD5
646c5cb3a9f9eeccff59d29f46c33fb9

SHA1
e2960e4a08a1076c2e8806c09256d007cac84e4c

SHA256
8b274c3f26cfde506eabfa689e18fcc68f259ad10634c3bf4c28ebebf6cf66d8

SHA512
7bf7aaeb26ae7f651fb96f7b4d4034c9a69c1e72e70f70e235ae618d8bebb00222be390be624990121e5e45e9c8702c65b242066886e15c059e49c04f89abd48

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1txvui6d.default-release\cache2\doomed\16399

Filesize
9KB

MD5
2c87681ddd6e3b9eebc120a7f8f0d3b4

SHA1
498d2744bb3785b15369bb35f17ba102eb3568ee

SHA256
a433629fb73063e69fa3c3c1a583fb7994d1594c1cda2c752575784f4a166d88

SHA512
8457b2ede7d2d364370b84d7e66db023a6877d0d6c753bcddc48e861105a2a8829065d4fc4aaf103f2cf017def050a6824de80e8bc8b6dd5c755b59ea1d30947

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1txvui6d.default-release\cache2\entries\180089313729568CF6D0CAF9991F0FA4115478F0

Filesize
13KB

MD5
c6dfa9627b37ef1ea19b5e567781f528

SHA1
8877dd68b3080d2b1debe63a92fe7dd7f425b7ee

SHA256
9b03003f388cd88080cd3dce869e5ad3328ba6206b5d831aa18763825b429248

SHA512
b7bfaa4799e3bbedb4c23b00ccc251fb3dbec43e720b597824e363a5f55a189706ae8fbdbd8e39583216dc085c14c1f494ab1b2c3e23abd34625d6d2c9820605

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\1txvui6d.default-release\cache2\entries\51D52D298316CD3F9A90A40E946BB34EFA1BFB72

Filesize
13KB

MD5
6f11b4b3854b8121ecb7517f9a92bfbe

SHA1
7dc0f5269c378f0b041a50795b69fced2d687053

SHA256
856c6b0d56d96d9512d6d8c29837f1bb9ae4b22bdf6dc1034d04f225613d69c4

SHA512
d15da2a091cbecc3882e76cbb2c2e8b5a906f2ff310c2210711bc47f934febdab1d39cab33f8f0f9bf0eda3530d818e937a5c0d6bc75fe81594c766885c8f3e4

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\VCRUNTIME140.dll

Filesize
106KB

MD5
49c96cecda5c6c660a107d378fdfc3d4

SHA1
00149b7a66723e3f0310f139489fe172f818ca8e

SHA256
69320f278d90efaaeb67e2a1b55e5b0543883125834c812c8d9c39676e0494fc

SHA512
e09e072f3095379b0c921d41d6e64f4f1cd78400594a2317cfb5e5dca03dedb5a8239ed89905c9e967d1acb376b0585a35addf6648422c7ddb472ce38b1ba60d

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\_bz2.pyd

Filesize
82KB

MD5
4438affaaa0ca1df5b9b1cdaa0115ec1

SHA1
4eda79eaf3de614d5f744aa9eea5bfcf66e2d386

SHA256
ec91e2b4baca31b992d016b84b70f110ce2b1b2dfd54f5e5bef6270ed7d13b85

SHA512
6992107ac4d2108e477bc81af667b8b8e5439231e7e9f4b15ce4bce1aeea811bc0f1aaa438be3b0e38597760cb504367512809ee1937c4b538a86724ae543ba6

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\_ctypes.pyd

Filesize
120KB

MD5
6114277c6fc040f68d25ca90e25924cd

SHA1
028179c77cb3ba29cd8494049421eaa4900ccd0e

SHA256
f07fe92ce85f7786f96a4d59c6ee5c05fe1db63a1889ba40a67e37069639b656

SHA512
76e8ebefb9ba4ea8dcab8fce50629946af4f2b3f2f43163f75483cfb0a97968478c8aaef1d6a37be85bfc4c91a859deda6da21d3e753daefe084a203d839353d

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\_decimal.pyd

Filesize
247KB

MD5
be315973aff9bdeb06629cd90e1a901f

SHA1
151f98d278e1f1308f2be1788c9f3b950ab88242

SHA256
0f9c6cc463611a9b2c692382fe1cdd7a52fea4733ffaf645d433f716f8bbd725

SHA512
8ea715438472e9c174dee5ece3c7d9752c31159e2d5796e5229b1df19f87316579352fc3649373db066dc537adf4869198b70b7d4d1d39ac647da2dd7cfc21e8

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\_hashlib.pyd

Filesize
63KB

MD5
1524882af71247adecf5815a4e55366a

SHA1
e25014c793c53503bdff9af046140edda329d01b

SHA256
6f7742dfdd371c39048d775f37df3bc2d8d4316c9008e62347b337d64ebed327

SHA512
5b954bb7953f19aa6f7c65ad3f105b77d37077950fb1b50d9d8d337bdd4b95343bac2f4c9fe17a02d1738d1f87eeef73dbbf5cdddcb470588cbc5a63845b188a

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\_lzma.pyd

Filesize
155KB

MD5
737119a80303ef4eccaa998d500e7640

SHA1
328c67c6c4d297ac13da725bf24467d8b5e982e3

SHA256
7158c1290ac29169160b3ec94d9c8bcde4012d67a555f325d44b418c54e2cc28

SHA512
1c9920e0841a65b01a0b339c5f5254d1039ef9a16fe0c2484a7e2a9048727f2cc081817aa771b0c574fb8d1a5a49dc39798a3c5e5b5e64392e9c168e1827be7c

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\_queue.pyd

Filesize
31KB

MD5
8bbed19359892f8c95c802c6ad7598e9

SHA1
773fca164965241f63170e7a1f3a8fa17f73ea18

SHA256
4e5b7c653c1b3dc3fd7519e4f39cc8a2fb2746e0ecdc4e433fe6029f5f4d9065

SHA512
22ea7667689a9f049fa34ddae6b858e1af3e646a379d2c5a4aef3e74a4ff1a4109418b363c9be960127f1c7e020aa393a47885bc45517c9e9aebe71ec7cb61a0

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\_socket.pyd

Filesize
77KB

MD5
64a6c475f59e5c57b3f4dd935f429f09

SHA1
ca2e0719dc32f22163ae0e7b53b2caadb0b9d023

SHA256
d03fa645cde89b4b01f4a2577139fbb7e1392cb91dc26213b3b76419110d8e49

SHA512
cf9e03b7b34cc095fe05c465f9d794319aaa0428fe30ab4ddce14ba78e835edf228d11ec016fd31dfe9f09d84b6f73482fb8e0f574d1fd08943c1ec9e0584973

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\_sqlite3.pyd

Filesize
117KB

MD5
a7df575bf69570944b004dfe150e8caf

SHA1
2fd19be98a07347d59afd78c167601479aac94bb

SHA256
b1223420e475348c0bfb90fae33fc44ce35d988270294158ec366893df221a4b

SHA512
18c381a4ded8d33271cbf0bea75af1c86c6d34cc436f68fb9342951c071c10d84cf9f96a0509c53e5886d47fed5bca113a7f7863f6873583daa7bb6af1aa9afa

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\_ssl.pyd

Filesize
172KB

MD5
a0b40f1f8fc6656c5637eacacf7021f6

SHA1
38813e25ffde1eee0b8154fa34af635186a243c1

SHA256
79d861f0670828dee06c2e3523e2f9a2a90d6c6996bde38201425aa4003119f1

SHA512
c18855d7c0069fff392d422e5b01fc518bbdf497eb3390c0b333ecac2497cd29abbdae4557e4f0c4e90321fba910fc3e4d235ce62b745fa34918f40fa667b713

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\_uuid.pyd

Filesize
24KB

MD5
4faa479423c54d5be2a103b46ecb4d04

SHA1
011f6cdbd3badaa5c969595985a9ad18547dd7ec

SHA256
c2ad3c1b4333bc388b6a22049c89008505c434b1b85bff0823b19ef0cf48065a

SHA512
92d35824c30667af606bba883bf6e275f2a8b5cbfea2e84a77e256d122b91b3ee7e84d9f4e2a4946e903a11293af9648a45e8cfbe247cbdc3bcdea92eb5349c6

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-console-l1-1-0.dll

Filesize
21KB

MD5
a148dc22ea14cd5578de22b2dfb0917f

SHA1
eaccb66f62e5b6d7154798e596eabd3cef00b982

SHA256
7603e172853a9711fbdc53b080432ad12984b463768dbc3aa842a26f5b26ae23

SHA512
4e3c927692fc41889b596273aea8bbd776cf7644dae26c411c12bda23cd3299a5c9adc06a930294310f002de74592a244767378fc9e37ec76e86bfa23f4c0478

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-datetime-l1-1-0.dll

Filesize
21KB

MD5
3095c9577395249e105410bdcc585f77

SHA1
7dfc0c81f8f28cbf36c5acdb83523569b430b944

SHA256
c08be448195f46c4b423d0ce0c2cdc343e842ff1f91b16a8d3c09d5152150917

SHA512
555568fc23ade238bcc13a447520d395546def4409a002d795dd3abea03b15321491bc63c97f4ed8eb78aa411a0b1267dce5c528e51dcac8ca9e93b8f5265786

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-debug-l1-1-0.dll

Filesize
21KB

MD5
a00ebd3cf88d668be6d62a25fa4fb525

SHA1
edb07eafd08991611389293e2be80f8ee98f1e62

SHA256
b44646453584305d4edf8ab5f5d1adea6b9650bd2b75f8486fc275be52b86433

SHA512
d63f0e9f2e079ee06aa3ab96a0bd2d169564896027b731ee2597327bdc55456c5fd0c2d8c7e68165fc80bbc3fe0c24a3388d4c3615f33fc9f9fc0b205ae9ba7a

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-errorhandling-l1-1-0.dll

Filesize
21KB

MD5
98340ffd2b1d8affef27d4b1260aeac5

SHA1
b428b39aa814a7038a1ddff9b64b935f51833a26

SHA256
7388a019922e9a0a3d05a8605a5307e3141b39f7d57b7faca5d34e72adfd5fa5

SHA512
6165c5be0360d55403e9dfd4e9df4ff9a12e5fb6057ed9278da09e688751487e46d9dd64949375c00764cbb4355cc13a1ea714055050f2ab7d432977b8443f81

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-file-l1-1-0.dll

Filesize
25KB

MD5
abf9850eb219be4976a94144a9eba057

SHA1
3d8c37588b36296240934b2f63a1b135a52fcee2

SHA256
41c5c577fea3ce13d5beb64ce0920f1061f65bcf39eafa8cd3dfc09ff48bcf76

SHA512
dfaafb43ce7f05b2db35eac10b314fb506c6aada80f6c4327b09ec33c170478ebd0eea19f1c6ca2e4832bfa41f769046deca8f15d54b7966134d166ee6036bda

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-file-l1-2-0.dll

Filesize
21KB

MD5
2b36752a5157359da1c0e646ee9bec45

SHA1
708aeb7e945c9c709109cea359cb31bd7ac64889

SHA256
3e3eb284937b572d1d70ce27be77b5e02eb73704c8b50feb5eb933db1facd2fc

SHA512
fc56080362506e3f38f1b3eb9d3193cdb9e576613c2e672f0fe9df203862f8a0f31938fa48b4ff7115dfe6016fa1fd5c5422fdc1913df63b3fde5f478a8417a1

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-file-l2-1-0.dll

Filesize
18KB

MD5
bfffa7117fd9b1622c66d949bac3f1d7

SHA1
402b7b8f8dcfd321b1d12fc85a1ee5137a5569b2

SHA256
1ea267a2e6284f17dd548c6f2285e19f7edb15d6e737a55391140ce5cb95225e

SHA512
b319cc7b436b1be165cdf6ffcab8a87fe29de78f7e0b14c8f562be160481fb5483289bd5956fdc1d8660da7a3f86d8eede35c6cc2b7c3d4c852decf4b2dcdb7f

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-handle-l1-1-0.dll

Filesize
21KB

MD5
567ff20a8d330cbb3278d3360c8d56f5

SHA1
cdf0cfc650da3a1b57dc3ef982a317d37ffb974d

SHA256
47dfbe1ecc8abc002bd52dcd5281ed7378d457789be4cb1e9bee369150d7f5c8

SHA512
1643e900f13509f0ef9c7b7f8f2401fb3b6f2c0c39b512c623615df92b1e69df042ef1a0c6aace82173ce5d4d3c672c1636d6ee05545ce5c3b7374ab745e0e87

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-heap-l1-1-0.dll

Filesize
21KB

MD5
a8b967b65232ecce7261eaecf39e7d6d

SHA1
df0792b29c19d46a93291c88a497151a0ba4366d

SHA256
8fcc9a97a8ad3be9a8d0ce6bb502284dd145ebbe587b42cdeaa4262279517c1d

SHA512
b8116208eb646ec1c103f78c768c848eb9d8d7202ebdab4acb58686e6f0706f0d6aaa884e11065d7ece63ebbd452f35b1422bd79e6eb2405fb1892758195ccbb

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-interlocked-l1-1-0.dll

Filesize
21KB

MD5
5872cb5ca3980697283aab9007196ae6

SHA1
26e8de47d9bee371f6c7a47f206a131965b6b481

SHA256
0dff50774693fcb71782b5e214419032a8c00b3031151d93be5c971b6f62cd45

SHA512
9b3e2fa9f66d29bfc7a4ca5d673b395bcda223a85fd06c94a11217047c1a312148c9c6270d7f69dfef06b25f8b5ad46717a829bde55f540c804a4ba4c4af070c

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-libraryloader-l1-1-0.dll

Filesize
21KB

MD5
d042aa497ce2a9f03296f8de68ed0680

SHA1
f483a343a18b960630ccf0e6de2f82883550f3bf

SHA256
de3d2c5519f74a982f06f3f3fda085571c0cdcf5ad8d2d331c79d9c92062bdc3

SHA512
4e157c8701860982ce0dec956fe4bfb684d2db3eaa9e784f179d385be905fd0551ba90cc27c54179fc39a693d9c742364f2bf1a5444424ba5eae38103b5f0e02

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-localization-l1-2-0.dll

Filesize
21KB

MD5
3589557535bba7641da3d76eefb0c73d

SHA1
6f63107c2212300c7cd1573059c08b43e5bd9b95

SHA256
642b01bb93d2cb529acf56070d65aae3202fd0b48d19fd40ec6763b627bcbee6

SHA512
7aedf3cf686b416f8b419f8af1d57675096ab2c2378c5a006f6ecbf2fe1ad701f28b7be8f08c9083230cf4d15d463371e92a6032178cd6c139d60b26fbd49b06

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-memory-l1-1-0.dll

Filesize
21KB

MD5
064fb2e1b5e90796a68d1edf91269ad3

SHA1
6e3a8c568f038879b7b102975a4471b2489f5493

SHA256
3500935e638f7d0ae2bf564bf77f9329811329261185fcdb9cd702b999889ffd

SHA512
821f091529d45531811a73664473cebb372a310d855e1a4c1a028ad4dc7d36146d3030dcf10de8a4a4bf16fb535fe3d0d2e1fcd22959690842388abb177b0036

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-namedpipe-l1-1-0.dll

Filesize
21KB

MD5
d1bc9b3a7aa94d10c41fa16210aa9dba

SHA1
a358b824b1f26ead420d2100e5f1a3fb74af2b7a

SHA256
75652caf05e86adc88ed214fd208b4a289489cac2b28fd358e302e2e7c3c338f

SHA512
149478dfca0165d5a68e89070017cda3400926284eaa2143a810138ff710079cde413c031721de5b58cb834f03d4c5df5b4bd6c2bdb65687755ad77cae778b30

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-processenvironment-l1-1-0.dll

Filesize
21KB

MD5
4f1303827a67760d02feb54e9258edb1

SHA1
340d7029c39708d14da79b12a0e2ed0a8bc7c020

SHA256
77fc9adf1a734d9717700b038b98b4337a494fc4f7e1e706c82e97dbca896fd8

SHA512
20f067d1c2749c709e4fc45da8d9eb5b813f54d0e09fa482d00bc4a7e5744c587d0afc00cdd5263b4223fe94baa3f8ca110d010339f9e3f1c6b2700888dbe3d0

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-processthreads-l1-1-0.dll

Filesize
21KB

MD5
73586decad3b3d90653750504b356a5c

SHA1
39a7ee1660ca1291314ef78150e397b1d8683e03

SHA256
34f560c3e56f40db5df695c967b6e302e961085bc037bb9a1c2d2c866a9df48f

SHA512
9ec299e930d2b89ad379613f8fa63669ec7c858da8a24608b92175f42b0be75f8aa2e1727dabf7638ae9d2942d03840f288eab53f2c9f38dbea1325f1ea8b22b

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
21KB

MD5
774aa9f9318880cb4ad3bf6f464da556

SHA1
3a5c07cf35009c98eb033e1cbde1900135d1abf8

SHA256
ba9fbd3a21879614c050c86a74ad2fffc0362266d6fa7be0ef359de393136346

SHA512
f7b57afb9810e3390d27a5469572fb29f0f1726f599403a180e685466237dff5dec4fdce40105ef1bb057e012d546308213e7cec73e0d7d3c5815eec8189a75d

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-profile-l1-1-0.dll

Filesize
21KB

MD5
1be729c6d9bf1b58f435b23e7f87ba49

SHA1
4b2df3fab46a362ee46057c344995fa622e0672a

SHA256
4c425fbb8d2319d838733ab9cec63a576639192d993909e70cf84f49c107f785

SHA512
ceccc5ff2bd90a91cfbb948f979576795ff0a9503ddaafd268c14306f93d887975bd376b62ed688be51bb88b3a0c54ef332be93b4b0d8737b5ab70a661b11416

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-rtlsupport-l1-1-0.dll

Filesize
21KB

MD5
0b30c6862b5224cc429fe2eb2b7bf14b

SHA1
5c3affa14e3bfdafe09e9841a2920b57c7fcbc56

SHA256
d9c6f93c4972db08c7888d55e8e59e8aba022d416817d65bc96e5a258c859b5f

SHA512
b378f2a2812245ea948d81a925d041dbd7e7a8fb2770cf7dd47643da20f5c685c6121479f95b293177a9480290b17c49e7b4fc10d33734cf883d2c614daae1bf

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-string-l1-1-0.dll

Filesize
21KB

MD5
b65933f7bcadc7072d5a2d70ecba9f81

SHA1
c53561755b9f33d0ae7874b3a7d67bedcb0129d8

SHA256
eadf535795df58d4f52fc6237fe46feb0f8166daca5eaaa59cec3cee50a9181d

SHA512
4cbb8bda8609404fe84ca36a8cbfe1d69c55dee2b969231b2fa00ca9139d956196a2babbb80a1a2bb430a34e6bd335294f452bcbe9e44411561ebdf21e4aba91

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-synch-l1-1-0.dll

Filesize
21KB

MD5
bccc676f2fb18c1a1864363e5a649a88

SHA1
a095a83a32a4a65fe16aa0be9a517239fac5db0d

SHA256
9d3f803dc791d2ff2e05059f9bb9207cc8f4134e1ac05f20edd20cfadd6e72c0

SHA512
55aab9fa6f7c4904e4beea4ce250f45fb71c2dd6a6f099f4017101ebc45c0a6e303b6a222f49c971992cafe8988a042b7ef8e94671be858c926105021514737a

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-synch-l1-2-0.dll

Filesize
21KB

MD5
b962237df7ea045c325e7f97938097cb

SHA1
1115e0e13ecc177d057e3d1c9644ac4d108f780a

SHA256
a24dd6afdb4c4aa450ae4bc6a2861a49032170661b9c1f30cd0460c5dc57e0f7

SHA512
19ac4cccaaa59fbae042d03ba52d89f309bd2591b035f3ec3df430ff399d650fcf9c4d897834a520dea60dc0562a8a6f7d25a1fffcd32f765a4eaffe4c7d5ea2

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-sysinfo-l1-1-0.dll

Filesize
21KB

MD5
e4893842d031b98cac1c6f754a2a3f8d

SHA1
2b0187134e40d27553a85dd4ec89dd6c40e58a24

SHA256
abe4c1464b325365d38e0bc4ae729a17a7f6f7ba482935c66e6840e1b0d126c5

SHA512
fc61a66fdc7213857f204bd0b20671db7092e0010e07b5e0e8e8408ace8ac5b6e696a7d9fc969233b2b3ad5dae4d3b291b007ff27a316e7fb750bfc93257c532

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-timezone-l1-1-0.dll

Filesize
21KB

MD5
b9a20c9223d3e3d3a0c359f001ce1046

SHA1
9710b9a8c393ba00c254cf693c7c37990c447cc8

SHA256
00d9a7353be0a54c17e4862b86196a8b2bc6a007899fa2fbe61afd9765548068

SHA512
a7d5611c0b3b53da6cac61e0374d54d27e6e8a1af90ef66cd7e1b052f906c8b3f6087f4c6de0db3ae0b099df7689ecde6c815a954b728d36d9d3b5d002ccf18e

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-core-util-l1-1-0.dll

Filesize
21KB

MD5
f7fdc91ac711a9bb3391901957a25cea

SHA1
1cebc5497e15051249c951677b5b550a1770c24f

SHA256
de47c1f924dc12e41d3a123b7dcce0260e7758b90fb95ec95c270fc116fc7599

SHA512
0e03c998622d6bf113e8d3b4dab728974391efecf59df89f938bd22240488e71885c05fb0fa805948b3d9645758409a0966299b26625aa36e3fd6e519ee22769

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-crt-conio-l1-1-0.dll

Filesize
21KB

MD5
9eb2c06decaae1a109a94886a26eec25

SHA1
307ce096bee44f54a6d37aab1ef123fb423ed028

SHA256
da8fd2fe08a531d2331c1fbee9f4ae9015b64f24a2654a7f82418c86b4ab6909

SHA512
7e701cb00a4cab8d5b3ecf55a16fef0103f9be1aa3fd7b53c7bab968708c21e8d1c763ad80a7a8d6c76dd45ddd244c9c9e8944455c2025b4195660b61ac1e8b7

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-crt-convert-l1-1-0.dll

Filesize
25KB

MD5
87e2934e49d7d111f383673f97d5029e

SHA1
267603d5510b775de3667f7d92bfaa3bd60e6533

SHA256
fb9dd774b25ab8e661c922caffb976c37a4d10a631ab65665da60016ef0c4d7c

SHA512
e6025ad419359ad3e06cc7a3b3b7436464dbbc71b91653833575264a5f8b0d781844a411bcd915d404b9a8c0a056eaf6d4d412723936845b53bfb5368bf5f7a7

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-crt-environment-l1-1-0.dll

Filesize
21KB

MD5
e41612752a7dfbbe756322cf48e106b9

SHA1
0ec106e926c9837a43e1d7ec8d1a5f03edd5ec3d

SHA256
4bb9d36e0e034652f2331ddb43ee061608f436cbc9e5771b4d27b28fa10f5248

SHA512
9bed9399e896d1cc58cc06e8d7ec6cc3345be6d15ca307c670e0f282c9ebe48a6cc1b145c2ecf94d84214cddff8f0d0d720ea984478c74c98e2499c2184638c9

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
21KB

MD5
102a8c01049ef18cc6e8798a9e5d57f4

SHA1
9adef547e03032d8c5525cc9c7d4512fbeb53948

SHA256
e13edab280e7b3410d7f4ce30a8e8cae64f38652d770fc3bf223206f0c57aaa5

SHA512
a9fbc726f33399f55f70967f3f1bf374589eaad9581d9e94228d39afa06cdce31ed25bdc04805aad361c7cafbeb56ca39f6693259d67457199d4423a61b32263

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-crt-heap-l1-1-0.dll

Filesize
21KB

MD5
4b038cdc70357d2dec440717ac344a52

SHA1
f67ba87f6830858845a5763381a47893af061bf8

SHA256
6a24e9cfb0efd9e1b90053d4ebd87fc35144e61ae3f6555c7d400542d648e2b5

SHA512
9557f15fa3c06de89ea8be0c959b94575a1c4587151687730f9e66fed095feb882d43ea32262000f871e6d860ce0c6c341cf5509a6ce81866f6d0efacb8526fe

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-crt-locale-l1-1-0.dll

Filesize
21KB

MD5
75f1a5f65790560d9544f3fb70efba51

SHA1
f30a5751901cfffc250be76e13a8b711ebc06bcc

SHA256
e0e02ea6c17da186e25e352b78c80b1b3511b5c1590e5ba647b14a7b384af0f8

SHA512
b7e285ca35f6a8ae2ccbe21594d72152175301a02ad6b92fe130e1e226a0faad1bfad1bd49857401549c09b50feee2c42c23ca4c19b2845cad090f5b9e8e8f63

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-crt-math-l1-1-0.dll

Filesize
29KB

MD5
a592d1b2ecc42d1a083f0d34feae2444

SHA1
29718af390f832626fcdcc57c107333cdb5743e1

SHA256
18a827b01de7b1a3d5c8d17b79ad2462a90308124448a9b8c47eccda39c3a095

SHA512
44bed6d24f1fa35b10d2b2b1574e7baf10182e60fdcb6cba5dd9de5cd7a5183198925e4fa5a7e2896564a30f7b70de69691713118d59bf5162ce35aff5bcf7a6

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-crt-process-l1-1-0.dll

Filesize
21KB

MD5
e3914d51afd864a6c6587aa9192c491b

SHA1
bae85701809bc259a8744aafa45cd7159e6c13f8

SHA256
28257cc063431f78284335ce3002ffb71b75c1e7ccabf5417bb42392c35564b4

SHA512
43b1445a80d309ec73d52d6cf68f4533a132fb55ab672e5e2a878bb42c1cb36d6e4c504d43fa4923e692c8be600f3f9d5a5edde80602636cb726eedfca23dfb8

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
25KB

MD5
364bc49cc7034f8a9981ade1ce565229

SHA1
fbd76c1842d1ccf563ece2db32fff4c71e7ca689

SHA256
6254fd07ace88685112e3a7b73676aabf13a1b1bc30c55dd976b34fea12b7f1d

SHA512
65e59e3358eb1bf26823c9538c74d343e7383591c021d2b340ef68aa9a274d65b15b30bbbe55f4b32e3a08fc79d4e179a6ce92eadb8c4be09a2c35c348ce10af

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
25KB

MD5
8341f0371e25b8077fe61c89a9ef8144

SHA1
fc185203e33abed12e1398440cb2ee283ca9541a

SHA256
bd9a5d4554ef1a374257e8dd9436d89f686006ed1fd1cc44364b237bf5b795ff

SHA512
9c7e4e8d8e9e620f441ab5106820ec021d2b2323f44ed8cc8ec9673745dbc531347356f1ff195d63b62b09cc5c27e8f8641ce25be12ee9b700b5fc766337228b

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-crt-string-l1-1-0.dll

Filesize
25KB

MD5
f9297b9ff06295bc07b7e5281b1face0

SHA1
d0eb0fddbb3eb187df0f0e5f9ddffcfc2e05f9b7

SHA256
c56a2ee0cc6dc1e7283b9bda8b7b2dba957329cb4bc9aca4cd99f88e108f9c04

SHA512
bec6222776015996eba744698d3254945dfe4bb4dc0d85528ee59a0f3b5fc5bb054bbf496d562cfc7b4cc81b4d3df5c53761931162a0091a49386233afba4f9c

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-crt-time-l1-1-0.dll

Filesize
21KB

MD5
816a8932759bdb478d4263cacbf972e3

SHA1
ac9f2bed41e340313501aa7d33dcd369748f0496

SHA256
ce9a8e18923d12e2f62ce2a20693113000fc361cc816773037c155c273b99e7c

SHA512
5144f01bee04455d5b9a7b07e62f4afb928605331213eb483265016640198c175dc08673903ed5bc16b385ee76657aa4303776233d04347d9d1daadce39525c4

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\api-ms-win-crt-utility-l1-1-0.dll

Filesize
21KB

MD5
57d3ee548db3a503ac391af798e0e2a2

SHA1
d686a96c5046d6d7a022c4266a5d0014745360a4

SHA256
2c80280e51c242466e10a36a0bf2a341607983b6f6648f93b0718b34ab5285c5

SHA512
f3ea9c8f2f230d23bc878e37044599b2c77f0bf6dd84b07c2f87a84263fb9ac7f44732f05e14781b6046afb2a39f27135c96d2da2ab9605bd00e55d9b0fffb0b

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\base_library.zip

Filesize
1.4MB

MD5
6e746d96de218f599b7a508e7d4429e1

SHA1
b4ed74cc0b51dc3d88eb4b9bcc5a9467a45de43c

SHA256
2999b0766238d80aa8d098b74259f839a7281775bf54198a57c132675dd625f5

SHA512
e2e979a79e6109d3776d43003f7ca8d23e132278a6dbb40afdb5eb4228e64f4bbb393e6825f334909e31c75e0051e49444baf415557780e5a51330aebdc67ee7

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\certifi\cacert.pem

Filesize
275KB

MD5
78d9dd608305a97773574d1c0fb10b61

SHA1
9e177f31a3622ad71c3d403422c9a980e563fe32

SHA256
794d039ffdf277c047e26f2c7d58f81a5865d8a0eb7024a0fac1164fea4d27cf

SHA512
0c2d08747712ed227b4992f6f8f3cc21168627a79e81c6e860ee2b5f711af7f4387d3b71b390aa70a13661fc82806cc77af8ab1e8a8df82ad15e29e05fa911bf

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\charset_normalizer\md.cp311-win_amd64.pyd

Filesize
10KB

MD5
28af0ffb49cc20fe5af9fe8efa49d6f1

SHA1
2c17057c33382ddffea3ca589018cba04c4e49d7

SHA256
f1e26ef5d12c58d652b0b5437c355a14cd66606b2fbc00339497dd00243081e0

SHA512
9aa99e17f20a5dd485ae43ac85842bd5270ebab83a49e896975a8fa9f98ffc5f7585bef84ed46ba55f40a25e224f2640e85cebe5acb9087cf46d178ecc8029f0

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\charset_normalizer\md__mypyc.cp311-win_amd64.pyd

Filesize
110KB

MD5
6cdca2fde9df198da58955397033af98

SHA1
e457c97721504d25f43b549d57e4538a62623168

SHA256
a4a758eabd1b2b45f3c4699bdfebc98f196dc691c0a3d5407e17fffffafc5df7

SHA512
7b3c384ba9993d3192ed852191ff77bdcd3421cbc69ff636c6deb8fe7248e066573b68d80a8f280ae0c1cb015f79967d46d910455d932eaeac072c76d0757e92

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\libcrypto-3.dll

Filesize
4.9MB

MD5
7a6a8c2a8c379b111cdceb66b18d687d

SHA1
f3b8a4c731fa0145f224112f91f046fddf642794

SHA256
8e13b53ee25825b97f191d77b51ed03966f8b435773fa3fbc36f3eb668fc569b

SHA512
f2ef1702df861ef55ef397ad69985d62b675d348cab3862f6ca761f1ce3ee896f663a77d7b69b286be64e7c69be1215b03945781450b186fc02cfb1e4cb226b5

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\libffi-8.dll

Filesize
38KB

MD5
0f8e4992ca92baaf54cc0b43aaccce21

SHA1
c7300975df267b1d6adcbac0ac93fd7b1ab49bd2

SHA256
eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a

SHA512
6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\libssl-3.dll

Filesize
771KB

MD5
64acb046fe68d64ee475e19f67253a3c

SHA1
d9e66c9437ce6f775189d6fdbd171635193ec4cc

SHA256
b21309abd3dbbb1bf8fb6aa3c250fc85d7b0d9984bf4c942d1d4421502f31a10

SHA512
f8b583981df528cf4f1854b94eff6f51dd9d4be91e6fa6329a8c4435b705457c868ae40ee030fa54bebb646a37b547bc182c9cbf0df9a07fea03a18cf85c6766

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\python311.dll

Filesize
5.5MB

MD5
58e01abc9c9b5c885635180ed104fe95

SHA1
1c2f7216b125539d63bd111a7aba615c69deb8ba

SHA256
de1b95d2e951fc048c84684bc7df4346138910544ee335b61fc8e65f360c3837

SHA512
cd32c77191309d99aeed47699501b357b35669123f0dd70ed97c3791a009d1855ab27162db24a4bd9e719b68ee3b0539ee6db88e71abb9a2d4d629f87bc2c081

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\select.pyd

Filesize
29KB

MD5
653bdccb7af2aa9ccf50cb050fd3be64

SHA1
afe0a85425ae911694c250ab4cb1f6c3d3f2cc69

SHA256
e24a3e7885df9a18c29ba058c49c3adcf59e4b58107847b98eca365b6d94f279

SHA512
07e841fda7a2295380bfa05db7a4699f18c6e639da91d8ee2d126d4f96e4cddaedbd490deb4d2a2e8e5877edfff877693f67a9dc487e29742943e062d7be6277

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\sqlite3.dll

Filesize
1.4MB

MD5
b49b8fde59ee4e8178c4d02404d06ee7

SHA1
1816fc83155d01351e191d583c68e722928cce40

SHA256
1afd7f650596ad97fcf358b0e077121111641c38ca9d53132bab4c9588cf262f

SHA512
a033ce87c2e503b386fb92aa79a7ec14d6c96e4a35d0cb76d4989bacd16f44c4ed5ac4e13057f05f9d199a3fd8545b9a25296515ec456f29c464d949ff34942a

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\ucrtbase.dll

Filesize
992KB

MD5
0e0bac3d1dcc1833eae4e3e4cf83c4ef

SHA1
4189f4459c54e69c6d3155a82524bda7549a75a6

SHA256
8a91052ef261b5fbf3223ae9ce789af73dfe1e9b0ba5bdbc4d564870a24f2bae

SHA512
a45946e3971816f66dd7ea3788aacc384a9e95011500b458212dc104741315b85659e0d56a41570731d338bdf182141c093d3ced222c007038583ceb808e26fd

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI11042\unicodedata.pyd

Filesize
1.1MB

MD5
1905b5d0f945499441e8cd58eb123d86

SHA1
117e584e6fcc0e8cfc8e24e3af527999f14bac30

SHA256
b1788b81fa160e5120451f9252c7745cdde98b8ce59bf273a3dd867bb034c532

SHA512
ed88cd7e3259239a0c8d42d95fa2447fc454a944c849fa97449ad88871236fefdafe21dbfa6e9b5d8a54ddf1d5281ec34d314cb93d47ce7b13912a69d284f522

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\VCRUNTIME140.dll

Filesize
106KB

MD5
49c96cecda5c6c660a107d378fdfc3d4

SHA1
00149b7a66723e3f0310f139489fe172f818ca8e

SHA256
69320f278d90efaaeb67e2a1b55e5b0543883125834c812c8d9c39676e0494fc

SHA512
e09e072f3095379b0c921d41d6e64f4f1cd78400594a2317cfb5e5dca03dedb5a8239ed89905c9e967d1acb376b0585a35addf6648422c7ddb472ce38b1ba60d

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\_bz2.pyd

Filesize
82KB

MD5
4438affaaa0ca1df5b9b1cdaa0115ec1

SHA1
4eda79eaf3de614d5f744aa9eea5bfcf66e2d386

SHA256
ec91e2b4baca31b992d016b84b70f110ce2b1b2dfd54f5e5bef6270ed7d13b85

SHA512
6992107ac4d2108e477bc81af667b8b8e5439231e7e9f4b15ce4bce1aeea811bc0f1aaa438be3b0e38597760cb504367512809ee1937c4b538a86724ae543ba6

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\_ctypes.pyd

Filesize
120KB

MD5
6114277c6fc040f68d25ca90e25924cd

SHA1
028179c77cb3ba29cd8494049421eaa4900ccd0e

SHA256
f07fe92ce85f7786f96a4d59c6ee5c05fe1db63a1889ba40a67e37069639b656

SHA512
76e8ebefb9ba4ea8dcab8fce50629946af4f2b3f2f43163f75483cfb0a97968478c8aaef1d6a37be85bfc4c91a859deda6da21d3e753daefe084a203d839353d

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\_decimal.pyd

Filesize
247KB

MD5
be315973aff9bdeb06629cd90e1a901f

SHA1
151f98d278e1f1308f2be1788c9f3b950ab88242

SHA256
0f9c6cc463611a9b2c692382fe1cdd7a52fea4733ffaf645d433f716f8bbd725

SHA512
8ea715438472e9c174dee5ece3c7d9752c31159e2d5796e5229b1df19f87316579352fc3649373db066dc537adf4869198b70b7d4d1d39ac647da2dd7cfc21e8

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\_hashlib.pyd

Filesize
63KB

MD5
1524882af71247adecf5815a4e55366a

SHA1
e25014c793c53503bdff9af046140edda329d01b

SHA256
6f7742dfdd371c39048d775f37df3bc2d8d4316c9008e62347b337d64ebed327

SHA512
5b954bb7953f19aa6f7c65ad3f105b77d37077950fb1b50d9d8d337bdd4b95343bac2f4c9fe17a02d1738d1f87eeef73dbbf5cdddcb470588cbc5a63845b188a

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\_lzma.pyd

Filesize
155KB

MD5
737119a80303ef4eccaa998d500e7640

SHA1
328c67c6c4d297ac13da725bf24467d8b5e982e3

SHA256
7158c1290ac29169160b3ec94d9c8bcde4012d67a555f325d44b418c54e2cc28

SHA512
1c9920e0841a65b01a0b339c5f5254d1039ef9a16fe0c2484a7e2a9048727f2cc081817aa771b0c574fb8d1a5a49dc39798a3c5e5b5e64392e9c168e1827be7c

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\_queue.pyd

Filesize
31KB

MD5
8bbed19359892f8c95c802c6ad7598e9

SHA1
773fca164965241f63170e7a1f3a8fa17f73ea18

SHA256
4e5b7c653c1b3dc3fd7519e4f39cc8a2fb2746e0ecdc4e433fe6029f5f4d9065

SHA512
22ea7667689a9f049fa34ddae6b858e1af3e646a379d2c5a4aef3e74a4ff1a4109418b363c9be960127f1c7e020aa393a47885bc45517c9e9aebe71ec7cb61a0

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\_socket.pyd

Filesize
77KB

MD5
64a6c475f59e5c57b3f4dd935f429f09

SHA1
ca2e0719dc32f22163ae0e7b53b2caadb0b9d023

SHA256
d03fa645cde89b4b01f4a2577139fbb7e1392cb91dc26213b3b76419110d8e49

SHA512
cf9e03b7b34cc095fe05c465f9d794319aaa0428fe30ab4ddce14ba78e835edf228d11ec016fd31dfe9f09d84b6f73482fb8e0f574d1fd08943c1ec9e0584973

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\_sqlite3.pyd

Filesize
117KB

MD5
a7df575bf69570944b004dfe150e8caf

SHA1
2fd19be98a07347d59afd78c167601479aac94bb

SHA256
b1223420e475348c0bfb90fae33fc44ce35d988270294158ec366893df221a4b

SHA512
18c381a4ded8d33271cbf0bea75af1c86c6d34cc436f68fb9342951c071c10d84cf9f96a0509c53e5886d47fed5bca113a7f7863f6873583daa7bb6af1aa9afa

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\_ssl.pyd

Filesize
172KB

MD5
a0b40f1f8fc6656c5637eacacf7021f6

SHA1
38813e25ffde1eee0b8154fa34af635186a243c1

SHA256
79d861f0670828dee06c2e3523e2f9a2a90d6c6996bde38201425aa4003119f1

SHA512
c18855d7c0069fff392d422e5b01fc518bbdf497eb3390c0b333ecac2497cd29abbdae4557e4f0c4e90321fba910fc3e4d235ce62b745fa34918f40fa667b713

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\_uuid.pyd

Filesize
24KB

MD5
4faa479423c54d5be2a103b46ecb4d04

SHA1
011f6cdbd3badaa5c969595985a9ad18547dd7ec

SHA256
c2ad3c1b4333bc388b6a22049c89008505c434b1b85bff0823b19ef0cf48065a

SHA512
92d35824c30667af606bba883bf6e275f2a8b5cbfea2e84a77e256d122b91b3ee7e84d9f4e2a4946e903a11293af9648a45e8cfbe247cbdc3bcdea92eb5349c6

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-console-l1-1-0.dll

Filesize
21KB

MD5
a148dc22ea14cd5578de22b2dfb0917f

SHA1
eaccb66f62e5b6d7154798e596eabd3cef00b982

SHA256
7603e172853a9711fbdc53b080432ad12984b463768dbc3aa842a26f5b26ae23

SHA512
4e3c927692fc41889b596273aea8bbd776cf7644dae26c411c12bda23cd3299a5c9adc06a930294310f002de74592a244767378fc9e37ec76e86bfa23f4c0478

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-datetime-l1-1-0.dll

Filesize
21KB

MD5
3095c9577395249e105410bdcc585f77

SHA1
7dfc0c81f8f28cbf36c5acdb83523569b430b944

SHA256
c08be448195f46c4b423d0ce0c2cdc343e842ff1f91b16a8d3c09d5152150917

SHA512
555568fc23ade238bcc13a447520d395546def4409a002d795dd3abea03b15321491bc63c97f4ed8eb78aa411a0b1267dce5c528e51dcac8ca9e93b8f5265786

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-debug-l1-1-0.dll

Filesize
21KB

MD5
a00ebd3cf88d668be6d62a25fa4fb525

SHA1
edb07eafd08991611389293e2be80f8ee98f1e62

SHA256
b44646453584305d4edf8ab5f5d1adea6b9650bd2b75f8486fc275be52b86433

SHA512
d63f0e9f2e079ee06aa3ab96a0bd2d169564896027b731ee2597327bdc55456c5fd0c2d8c7e68165fc80bbc3fe0c24a3388d4c3615f33fc9f9fc0b205ae9ba7a

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-errorhandling-l1-1-0.dll

Filesize
21KB

MD5
98340ffd2b1d8affef27d4b1260aeac5

SHA1
b428b39aa814a7038a1ddff9b64b935f51833a26

SHA256
7388a019922e9a0a3d05a8605a5307e3141b39f7d57b7faca5d34e72adfd5fa5

SHA512
6165c5be0360d55403e9dfd4e9df4ff9a12e5fb6057ed9278da09e688751487e46d9dd64949375c00764cbb4355cc13a1ea714055050f2ab7d432977b8443f81

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-file-l1-1-0.dll

Filesize
25KB

MD5
abf9850eb219be4976a94144a9eba057

SHA1
3d8c37588b36296240934b2f63a1b135a52fcee2

SHA256
41c5c577fea3ce13d5beb64ce0920f1061f65bcf39eafa8cd3dfc09ff48bcf76

SHA512
dfaafb43ce7f05b2db35eac10b314fb506c6aada80f6c4327b09ec33c170478ebd0eea19f1c6ca2e4832bfa41f769046deca8f15d54b7966134d166ee6036bda

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-file-l1-2-0.dll

Filesize
21KB

MD5
2b36752a5157359da1c0e646ee9bec45

SHA1
708aeb7e945c9c709109cea359cb31bd7ac64889

SHA256
3e3eb284937b572d1d70ce27be77b5e02eb73704c8b50feb5eb933db1facd2fc

SHA512
fc56080362506e3f38f1b3eb9d3193cdb9e576613c2e672f0fe9df203862f8a0f31938fa48b4ff7115dfe6016fa1fd5c5422fdc1913df63b3fde5f478a8417a1

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-file-l2-1-0.dll

Filesize
18KB

MD5
bfffa7117fd9b1622c66d949bac3f1d7

SHA1
402b7b8f8dcfd321b1d12fc85a1ee5137a5569b2

SHA256
1ea267a2e6284f17dd548c6f2285e19f7edb15d6e737a55391140ce5cb95225e

SHA512
b319cc7b436b1be165cdf6ffcab8a87fe29de78f7e0b14c8f562be160481fb5483289bd5956fdc1d8660da7a3f86d8eede35c6cc2b7c3d4c852decf4b2dcdb7f

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-handle-l1-1-0.dll

Filesize
21KB

MD5
567ff20a8d330cbb3278d3360c8d56f5

SHA1
cdf0cfc650da3a1b57dc3ef982a317d37ffb974d

SHA256
47dfbe1ecc8abc002bd52dcd5281ed7378d457789be4cb1e9bee369150d7f5c8

SHA512
1643e900f13509f0ef9c7b7f8f2401fb3b6f2c0c39b512c623615df92b1e69df042ef1a0c6aace82173ce5d4d3c672c1636d6ee05545ce5c3b7374ab745e0e87

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-heap-l1-1-0.dll

Filesize
21KB

MD5
a8b967b65232ecce7261eaecf39e7d6d

SHA1
df0792b29c19d46a93291c88a497151a0ba4366d

SHA256
8fcc9a97a8ad3be9a8d0ce6bb502284dd145ebbe587b42cdeaa4262279517c1d

SHA512
b8116208eb646ec1c103f78c768c848eb9d8d7202ebdab4acb58686e6f0706f0d6aaa884e11065d7ece63ebbd452f35b1422bd79e6eb2405fb1892758195ccbb

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-interlocked-l1-1-0.dll

Filesize
21KB

MD5
5872cb5ca3980697283aab9007196ae6

SHA1
26e8de47d9bee371f6c7a47f206a131965b6b481

SHA256
0dff50774693fcb71782b5e214419032a8c00b3031151d93be5c971b6f62cd45

SHA512
9b3e2fa9f66d29bfc7a4ca5d673b395bcda223a85fd06c94a11217047c1a312148c9c6270d7f69dfef06b25f8b5ad46717a829bde55f540c804a4ba4c4af070c

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-libraryloader-l1-1-0.dll

Filesize
21KB

MD5
d042aa497ce2a9f03296f8de68ed0680

SHA1
f483a343a18b960630ccf0e6de2f82883550f3bf

SHA256
de3d2c5519f74a982f06f3f3fda085571c0cdcf5ad8d2d331c79d9c92062bdc3

SHA512
4e157c8701860982ce0dec956fe4bfb684d2db3eaa9e784f179d385be905fd0551ba90cc27c54179fc39a693d9c742364f2bf1a5444424ba5eae38103b5f0e02

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-localization-l1-2-0.dll

Filesize
21KB

MD5
3589557535bba7641da3d76eefb0c73d

SHA1
6f63107c2212300c7cd1573059c08b43e5bd9b95

SHA256
642b01bb93d2cb529acf56070d65aae3202fd0b48d19fd40ec6763b627bcbee6

SHA512
7aedf3cf686b416f8b419f8af1d57675096ab2c2378c5a006f6ecbf2fe1ad701f28b7be8f08c9083230cf4d15d463371e92a6032178cd6c139d60b26fbd49b06

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-memory-l1-1-0.dll

Filesize
21KB

MD5
064fb2e1b5e90796a68d1edf91269ad3

SHA1
6e3a8c568f038879b7b102975a4471b2489f5493

SHA256
3500935e638f7d0ae2bf564bf77f9329811329261185fcdb9cd702b999889ffd

SHA512
821f091529d45531811a73664473cebb372a310d855e1a4c1a028ad4dc7d36146d3030dcf10de8a4a4bf16fb535fe3d0d2e1fcd22959690842388abb177b0036

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-namedpipe-l1-1-0.dll

Filesize
21KB

MD5
d1bc9b3a7aa94d10c41fa16210aa9dba

SHA1
a358b824b1f26ead420d2100e5f1a3fb74af2b7a

SHA256
75652caf05e86adc88ed214fd208b4a289489cac2b28fd358e302e2e7c3c338f

SHA512
149478dfca0165d5a68e89070017cda3400926284eaa2143a810138ff710079cde413c031721de5b58cb834f03d4c5df5b4bd6c2bdb65687755ad77cae778b30

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-processenvironment-l1-1-0.dll

Filesize
21KB

MD5
4f1303827a67760d02feb54e9258edb1

SHA1
340d7029c39708d14da79b12a0e2ed0a8bc7c020

SHA256
77fc9adf1a734d9717700b038b98b4337a494fc4f7e1e706c82e97dbca896fd8

SHA512
20f067d1c2749c709e4fc45da8d9eb5b813f54d0e09fa482d00bc4a7e5744c587d0afc00cdd5263b4223fe94baa3f8ca110d010339f9e3f1c6b2700888dbe3d0

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-processthreads-l1-1-0.dll

Filesize
21KB

MD5
73586decad3b3d90653750504b356a5c

SHA1
39a7ee1660ca1291314ef78150e397b1d8683e03

SHA256
34f560c3e56f40db5df695c967b6e302e961085bc037bb9a1c2d2c866a9df48f

SHA512
9ec299e930d2b89ad379613f8fa63669ec7c858da8a24608b92175f42b0be75f8aa2e1727dabf7638ae9d2942d03840f288eab53f2c9f38dbea1325f1ea8b22b

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
21KB

MD5
774aa9f9318880cb4ad3bf6f464da556

SHA1
3a5c07cf35009c98eb033e1cbde1900135d1abf8

SHA256
ba9fbd3a21879614c050c86a74ad2fffc0362266d6fa7be0ef359de393136346

SHA512
f7b57afb9810e3390d27a5469572fb29f0f1726f599403a180e685466237dff5dec4fdce40105ef1bb057e012d546308213e7cec73e0d7d3c5815eec8189a75d

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-profile-l1-1-0.dll

Filesize
21KB

MD5
1be729c6d9bf1b58f435b23e7f87ba49

SHA1
4b2df3fab46a362ee46057c344995fa622e0672a

SHA256
4c425fbb8d2319d838733ab9cec63a576639192d993909e70cf84f49c107f785

SHA512
ceccc5ff2bd90a91cfbb948f979576795ff0a9503ddaafd268c14306f93d887975bd376b62ed688be51bb88b3a0c54ef332be93b4b0d8737b5ab70a661b11416

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-rtlsupport-l1-1-0.dll

Filesize
21KB

MD5
0b30c6862b5224cc429fe2eb2b7bf14b

SHA1
5c3affa14e3bfdafe09e9841a2920b57c7fcbc56

SHA256
d9c6f93c4972db08c7888d55e8e59e8aba022d416817d65bc96e5a258c859b5f

SHA512
b378f2a2812245ea948d81a925d041dbd7e7a8fb2770cf7dd47643da20f5c685c6121479f95b293177a9480290b17c49e7b4fc10d33734cf883d2c614daae1bf

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-string-l1-1-0.dll

Filesize
21KB

MD5
b65933f7bcadc7072d5a2d70ecba9f81

SHA1
c53561755b9f33d0ae7874b3a7d67bedcb0129d8

SHA256
eadf535795df58d4f52fc6237fe46feb0f8166daca5eaaa59cec3cee50a9181d

SHA512
4cbb8bda8609404fe84ca36a8cbfe1d69c55dee2b969231b2fa00ca9139d956196a2babbb80a1a2bb430a34e6bd335294f452bcbe9e44411561ebdf21e4aba91

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-synch-l1-1-0.dll

Filesize
21KB

MD5
bccc676f2fb18c1a1864363e5a649a88

SHA1
a095a83a32a4a65fe16aa0be9a517239fac5db0d

SHA256
9d3f803dc791d2ff2e05059f9bb9207cc8f4134e1ac05f20edd20cfadd6e72c0

SHA512
55aab9fa6f7c4904e4beea4ce250f45fb71c2dd6a6f099f4017101ebc45c0a6e303b6a222f49c971992cafe8988a042b7ef8e94671be858c926105021514737a

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-synch-l1-2-0.dll

Filesize
21KB

MD5
b962237df7ea045c325e7f97938097cb

SHA1
1115e0e13ecc177d057e3d1c9644ac4d108f780a

SHA256
a24dd6afdb4c4aa450ae4bc6a2861a49032170661b9c1f30cd0460c5dc57e0f7

SHA512
19ac4cccaaa59fbae042d03ba52d89f309bd2591b035f3ec3df430ff399d650fcf9c4d897834a520dea60dc0562a8a6f7d25a1fffcd32f765a4eaffe4c7d5ea2

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-sysinfo-l1-1-0.dll

Filesize
21KB

MD5
e4893842d031b98cac1c6f754a2a3f8d

SHA1
2b0187134e40d27553a85dd4ec89dd6c40e58a24

SHA256
abe4c1464b325365d38e0bc4ae729a17a7f6f7ba482935c66e6840e1b0d126c5

SHA512
fc61a66fdc7213857f204bd0b20671db7092e0010e07b5e0e8e8408ace8ac5b6e696a7d9fc969233b2b3ad5dae4d3b291b007ff27a316e7fb750bfc93257c532

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-timezone-l1-1-0.dll

Filesize
21KB

MD5
b9a20c9223d3e3d3a0c359f001ce1046

SHA1
9710b9a8c393ba00c254cf693c7c37990c447cc8

SHA256
00d9a7353be0a54c17e4862b86196a8b2bc6a007899fa2fbe61afd9765548068

SHA512
a7d5611c0b3b53da6cac61e0374d54d27e6e8a1af90ef66cd7e1b052f906c8b3f6087f4c6de0db3ae0b099df7689ecde6c815a954b728d36d9d3b5d002ccf18e

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-core-util-l1-1-0.dll

Filesize
21KB

MD5
f7fdc91ac711a9bb3391901957a25cea

SHA1
1cebc5497e15051249c951677b5b550a1770c24f

SHA256
de47c1f924dc12e41d3a123b7dcce0260e7758b90fb95ec95c270fc116fc7599

SHA512
0e03c998622d6bf113e8d3b4dab728974391efecf59df89f938bd22240488e71885c05fb0fa805948b3d9645758409a0966299b26625aa36e3fd6e519ee22769

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-crt-conio-l1-1-0.dll

Filesize
21KB

MD5
9eb2c06decaae1a109a94886a26eec25

SHA1
307ce096bee44f54a6d37aab1ef123fb423ed028

SHA256
da8fd2fe08a531d2331c1fbee9f4ae9015b64f24a2654a7f82418c86b4ab6909

SHA512
7e701cb00a4cab8d5b3ecf55a16fef0103f9be1aa3fd7b53c7bab968708c21e8d1c763ad80a7a8d6c76dd45ddd244c9c9e8944455c2025b4195660b61ac1e8b7

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-crt-convert-l1-1-0.dll

Filesize
25KB

MD5
87e2934e49d7d111f383673f97d5029e

SHA1
267603d5510b775de3667f7d92bfaa3bd60e6533

SHA256
fb9dd774b25ab8e661c922caffb976c37a4d10a631ab65665da60016ef0c4d7c

SHA512
e6025ad419359ad3e06cc7a3b3b7436464dbbc71b91653833575264a5f8b0d781844a411bcd915d404b9a8c0a056eaf6d4d412723936845b53bfb5368bf5f7a7

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-crt-environment-l1-1-0.dll

Filesize
21KB

MD5
e41612752a7dfbbe756322cf48e106b9

SHA1
0ec106e926c9837a43e1d7ec8d1a5f03edd5ec3d

SHA256
4bb9d36e0e034652f2331ddb43ee061608f436cbc9e5771b4d27b28fa10f5248

SHA512
9bed9399e896d1cc58cc06e8d7ec6cc3345be6d15ca307c670e0f282c9ebe48a6cc1b145c2ecf94d84214cddff8f0d0d720ea984478c74c98e2499c2184638c9

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
21KB

MD5
102a8c01049ef18cc6e8798a9e5d57f4

SHA1
9adef547e03032d8c5525cc9c7d4512fbeb53948

SHA256
e13edab280e7b3410d7f4ce30a8e8cae64f38652d770fc3bf223206f0c57aaa5

SHA512
a9fbc726f33399f55f70967f3f1bf374589eaad9581d9e94228d39afa06cdce31ed25bdc04805aad361c7cafbeb56ca39f6693259d67457199d4423a61b32263

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-crt-heap-l1-1-0.dll

Filesize
21KB

MD5
4b038cdc70357d2dec440717ac344a52

SHA1
f67ba87f6830858845a5763381a47893af061bf8

SHA256
6a24e9cfb0efd9e1b90053d4ebd87fc35144e61ae3f6555c7d400542d648e2b5

SHA512
9557f15fa3c06de89ea8be0c959b94575a1c4587151687730f9e66fed095feb882d43ea32262000f871e6d860ce0c6c341cf5509a6ce81866f6d0efacb8526fe

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-crt-locale-l1-1-0.dll

Filesize
21KB

MD5
75f1a5f65790560d9544f3fb70efba51

SHA1
f30a5751901cfffc250be76e13a8b711ebc06bcc

SHA256
e0e02ea6c17da186e25e352b78c80b1b3511b5c1590e5ba647b14a7b384af0f8

SHA512
b7e285ca35f6a8ae2ccbe21594d72152175301a02ad6b92fe130e1e226a0faad1bfad1bd49857401549c09b50feee2c42c23ca4c19b2845cad090f5b9e8e8f63

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-crt-math-l1-1-0.dll

Filesize
29KB

MD5
a592d1b2ecc42d1a083f0d34feae2444

SHA1
29718af390f832626fcdcc57c107333cdb5743e1

SHA256
18a827b01de7b1a3d5c8d17b79ad2462a90308124448a9b8c47eccda39c3a095

SHA512
44bed6d24f1fa35b10d2b2b1574e7baf10182e60fdcb6cba5dd9de5cd7a5183198925e4fa5a7e2896564a30f7b70de69691713118d59bf5162ce35aff5bcf7a6

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-crt-process-l1-1-0.dll

Filesize
21KB

MD5
e3914d51afd864a6c6587aa9192c491b

SHA1
bae85701809bc259a8744aafa45cd7159e6c13f8

SHA256
28257cc063431f78284335ce3002ffb71b75c1e7ccabf5417bb42392c35564b4

SHA512
43b1445a80d309ec73d52d6cf68f4533a132fb55ab672e5e2a878bb42c1cb36d6e4c504d43fa4923e692c8be600f3f9d5a5edde80602636cb726eedfca23dfb8

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
25KB

MD5
364bc49cc7034f8a9981ade1ce565229

SHA1
fbd76c1842d1ccf563ece2db32fff4c71e7ca689

SHA256
6254fd07ace88685112e3a7b73676aabf13a1b1bc30c55dd976b34fea12b7f1d

SHA512
65e59e3358eb1bf26823c9538c74d343e7383591c021d2b340ef68aa9a274d65b15b30bbbe55f4b32e3a08fc79d4e179a6ce92eadb8c4be09a2c35c348ce10af

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
25KB

MD5
8341f0371e25b8077fe61c89a9ef8144

SHA1
fc185203e33abed12e1398440cb2ee283ca9541a

SHA256
bd9a5d4554ef1a374257e8dd9436d89f686006ed1fd1cc44364b237bf5b795ff

SHA512
9c7e4e8d8e9e620f441ab5106820ec021d2b2323f44ed8cc8ec9673745dbc531347356f1ff195d63b62b09cc5c27e8f8641ce25be12ee9b700b5fc766337228b

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-crt-string-l1-1-0.dll

Filesize
25KB

MD5
f9297b9ff06295bc07b7e5281b1face0

SHA1
d0eb0fddbb3eb187df0f0e5f9ddffcfc2e05f9b7

SHA256
c56a2ee0cc6dc1e7283b9bda8b7b2dba957329cb4bc9aca4cd99f88e108f9c04

SHA512
bec6222776015996eba744698d3254945dfe4bb4dc0d85528ee59a0f3b5fc5bb054bbf496d562cfc7b4cc81b4d3df5c53761931162a0091a49386233afba4f9c

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-crt-time-l1-1-0.dll

Filesize
21KB

MD5
816a8932759bdb478d4263cacbf972e3

SHA1
ac9f2bed41e340313501aa7d33dcd369748f0496

SHA256
ce9a8e18923d12e2f62ce2a20693113000fc361cc816773037c155c273b99e7c

SHA512
5144f01bee04455d5b9a7b07e62f4afb928605331213eb483265016640198c175dc08673903ed5bc16b385ee76657aa4303776233d04347d9d1daadce39525c4

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\api-ms-win-crt-utility-l1-1-0.dll

Filesize
21KB

MD5
57d3ee548db3a503ac391af798e0e2a2

SHA1
d686a96c5046d6d7a022c4266a5d0014745360a4

SHA256
2c80280e51c242466e10a36a0bf2a341607983b6f6648f93b0718b34ab5285c5

SHA512
f3ea9c8f2f230d23bc878e37044599b2c77f0bf6dd84b07c2f87a84263fb9ac7f44732f05e14781b6046afb2a39f27135c96d2da2ab9605bd00e55d9b0fffb0b

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\base_library.zip

Filesize
1.4MB

MD5
6e746d96de218f599b7a508e7d4429e1

SHA1
b4ed74cc0b51dc3d88eb4b9bcc5a9467a45de43c

SHA256
2999b0766238d80aa8d098b74259f839a7281775bf54198a57c132675dd625f5

SHA512
e2e979a79e6109d3776d43003f7ca8d23e132278a6dbb40afdb5eb4228e64f4bbb393e6825f334909e31c75e0051e49444baf415557780e5a51330aebdc67ee7

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\libcrypto-3.dll

Filesize
4.9MB

MD5
7a6a8c2a8c379b111cdceb66b18d687d

SHA1
f3b8a4c731fa0145f224112f91f046fddf642794

SHA256
8e13b53ee25825b97f191d77b51ed03966f8b435773fa3fbc36f3eb668fc569b

SHA512
f2ef1702df861ef55ef397ad69985d62b675d348cab3862f6ca761f1ce3ee896f663a77d7b69b286be64e7c69be1215b03945781450b186fc02cfb1e4cb226b5

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\libffi-8.dll

Filesize
38KB

MD5
0f8e4992ca92baaf54cc0b43aaccce21

SHA1
c7300975df267b1d6adcbac0ac93fd7b1ab49bd2

SHA256
eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a

SHA512
6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\libssl-3.dll

Filesize
771KB

MD5
64acb046fe68d64ee475e19f67253a3c

SHA1
d9e66c9437ce6f775189d6fdbd171635193ec4cc

SHA256
b21309abd3dbbb1bf8fb6aa3c250fc85d7b0d9984bf4c942d1d4421502f31a10

SHA512
f8b583981df528cf4f1854b94eff6f51dd9d4be91e6fa6329a8c4435b705457c868ae40ee030fa54bebb646a37b547bc182c9cbf0df9a07fea03a18cf85c6766

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\python311.dll

Filesize
5.5MB

MD5
58e01abc9c9b5c885635180ed104fe95

SHA1
1c2f7216b125539d63bd111a7aba615c69deb8ba

SHA256
de1b95d2e951fc048c84684bc7df4346138910544ee335b61fc8e65f360c3837

SHA512
cd32c77191309d99aeed47699501b357b35669123f0dd70ed97c3791a009d1855ab27162db24a4bd9e719b68ee3b0539ee6db88e71abb9a2d4d629f87bc2c081

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\select.pyd

Filesize
29KB

MD5
653bdccb7af2aa9ccf50cb050fd3be64

SHA1
afe0a85425ae911694c250ab4cb1f6c3d3f2cc69

SHA256
e24a3e7885df9a18c29ba058c49c3adcf59e4b58107847b98eca365b6d94f279

SHA512
07e841fda7a2295380bfa05db7a4699f18c6e639da91d8ee2d126d4f96e4cddaedbd490deb4d2a2e8e5877edfff877693f67a9dc487e29742943e062d7be6277

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\sqlite3.dll

Filesize
1.4MB

MD5
b49b8fde59ee4e8178c4d02404d06ee7

SHA1
1816fc83155d01351e191d583c68e722928cce40

SHA256
1afd7f650596ad97fcf358b0e077121111641c38ca9d53132bab4c9588cf262f

SHA512
a033ce87c2e503b386fb92aa79a7ec14d6c96e4a35d0cb76d4989bacd16f44c4ed5ac4e13057f05f9d199a3fd8545b9a25296515ec456f29c464d949ff34942a

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\ucrtbase.dll

Filesize
992KB

MD5
0e0bac3d1dcc1833eae4e3e4cf83c4ef

SHA1
4189f4459c54e69c6d3155a82524bda7549a75a6

SHA256
8a91052ef261b5fbf3223ae9ce789af73dfe1e9b0ba5bdbc4d564870a24f2bae

SHA512
a45946e3971816f66dd7ea3788aacc384a9e95011500b458212dc104741315b85659e0d56a41570731d338bdf182141c093d3ced222c007038583ceb808e26fd

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI28802\unicodedata.pyd

Filesize
1.1MB

MD5
1905b5d0f945499441e8cd58eb123d86

SHA1
117e584e6fcc0e8cfc8e24e3af527999f14bac30

SHA256
b1788b81fa160e5120451f9252c7745cdde98b8ce59bf273a3dd867bb034c532

SHA512
ed88cd7e3259239a0c8d42d95fa2447fc454a944c849fa97449ad88871236fefdafe21dbfa6e9b5d8a54ddf1d5281ec34d314cb93d47ce7b13912a69d284f522

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon

Filesize
442KB

MD5
85430baed3398695717b0263807cf97c

SHA1
fffbee923cea216f50fce5d54219a188a5100f41

SHA256
a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e

SHA512
06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

Filesize
8.0MB

MD5
a01c5ecd6108350ae23d2cddf0e77c17

SHA1
c6ac28a2cd979f1f9a75d56271821d5ff665e2b6

SHA256
345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42

SHA512
b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon-3

Filesize
6.5MB

MD5
438c3af1332297479ee9ed271bb7bf39

SHA1
b3571e5e31d02b02e7d68806a254a4d290339af3

SHA256
b45630be7b3c1c80551e0a89e7bd6dbc65804fa0ca99e5f13fb317b2083ac194

SHA512
984d3b438146d1180b6c37d54793fadb383f4585e9a13f0ec695f75b27b50db72d7f5f0ef218a6313302829ba83778c348d37c4d9e811c0dba7c04ef4fb04672

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

Filesize
5KB

MD5
66c812a850b2291860ee79f0bd96bfd3

SHA1
c4bb2e1b5d04d1417db419b426e0c27ace550ae9

SHA256
09619eaaa7a484cada0351131b275b4af2d6731379f9512439cf918b2b729b40

SHA512
b16aa3468fc117c269bfd7ae6fb76e4f5c2f423af96f4a42e95e4798b9af3027ea4a2796fe3eba6cb28d1270c7ee5474e9ba9b0f3d9b7aacc8976b8cd8c62ecd

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\SiteSecurityServiceState.txt

Filesize
372B

MD5
29ff5d2f061a8507177c4658f9ce777b

SHA1
dfdd0c5d4c3ab180535afaa7aabee09a9e9f1839

SHA256
9ac803615d838f6fb3263f71d4e8a57d373e05e560eb0073c87e7db3c8fb9aeb

SHA512
99bdd29147f574d6a37056fbf3b5e32df5bbcc11bbfb0e269a268ba5658789719c139351555ba346b4aea68f8d0aff4858ad580a4c4c9b9e1574d1882ae1c497

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\bookmarkbackups\bookmarks-2023-10-21_11_kPWsgDQGQf8zjRWnQyxquQ==.jsonlz4

Filesize
947B

MD5
8af7d7c15b7e09d5551bab82bd81fb56

SHA1
c94624c452a5f1b5081eaafd799b2b0e5b47ff1b

SHA256
e1c37913b862af8b4b00597e285af3980ad294adcf8055f7280e6d4bdfbe5524

SHA512
2cdd5224ec088f3ee36caccf6ce2374385da0ec99e96e28c876f00ac4457f721c1f8ff05d496e8d26c657faf7a046a5486f01107c1fa912bba872aaca7ba6e10

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\broadcast-listeners.json

Filesize
216B

MD5
2bbe29f3d144a0203f7373d7dd5d4700

SHA1
06f9f55cb0fbe0ef67f47da0f2f9ddf6d197ce80

SHA256
f57a26ccef391d7af1fb6e42e3486cc5eed5e068bf8f42bd22e047fc6b9c653d

SHA512
3a4e66c8205cd9b2baf6d11a7ee2f2494c7c48d8a7b69fee910d3adaabc782529f90d7d88d129b4f92e39862091e9dea771f4af66311f2009da11fe98758b0d4

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\datareporting\glean\db\data.safe.bin

Filesize
182B

MD5
7d3d11283370585b060d50a12715851a

SHA1
3a05d9b7daa2d377d95e7a5f3e8e7a8f705938e3

SHA256
86bff840e1bec67b7c91f97f4d37e3a638c5fdc7b56aae210b01745f292347b9

SHA512
a185a956e7105ad5a903d5d0e780df9421cf7b84ef1f83f7e9f3ab81bf683b440f23e55df4bbd52d60e89af467b5fc949bf1faa7810c523b98c7c2361fde010e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\datareporting\glean\db\data.safe.bin

Filesize
182B

MD5
c58234a092f9d899f0a623e28a4ab9db

SHA1
7398261b70453661c8b84df12e2bde7cbc07474b

SHA256
eaec709a98b57cd9c054a205f9bfa76c7424db2845c077822804f31e16ac134c

SHA512
ae2724fc45a8d9d26e43d86bcc7e20f398d8ab4e251e89550087ace1311c4d2571392f2f0bed78da211fcb28766779c1853b80742faa69f722b2c44c283569fd

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\extensions.json

Filesize
41KB

MD5
3b75bf697fc83e8b98d0434438b10d4a

SHA1
56065833e4b7492a13031bf7fd29fc2c0ccea23d

SHA256
3a7d6d6a5c748f1def39b6705157ffa1c764b499fd503b6b570ba3e661b48a63

SHA512
0cea5ccde53cde427356e5997a85bd3599e1a40e40dade492bad96baecd59588555916fc9761a86818763b27bb39bb5db68bf3cf62b04139ba9fd74f11c4f082

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

Filesize
997KB

MD5
fe3355639648c417e8307c6d051e3e37

SHA1
f54602d4b4778da21bc97c7238fc66aa68c8ee34

SHA256
1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e

SHA512
8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

Filesize
116B

MD5
3d33cdc0b3d281e67dd52e14435dd04f

SHA1
4db88689282fd4f9e9e6ab95fcbb23df6e6485db

SHA256
f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b

SHA512
a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\gmp-widevinecdm\4.10.2449.0\manifest.json

Filesize
372B

MD5
6981f969f95b2a983547050ab1cb2a20

SHA1
e81c6606465b5aefcbef6637e205e9af51312ef5

SHA256
13b46a6499f31975c9cc339274600481314f22d0af364b63eeddd2686f9ab665

SHA512
9415de9ad5c8a25cee82f8fa1df2e0c3a05def89b45c4564dc4462e561f54fdcaff7aa0f286426e63da02553e9b46179a0f85c7db03d15de6d497288386b26ac

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\gmp-widevinecdm\4.10.2449.0\widevinecdm.dll

Filesize
10.2MB

MD5
54dc5ae0659fabc263d83487ae1c03e4

SHA1
c572526830da6a5a6478f54bc6edb178a4d641f4

SHA256
43cad5d5074932ad10151184bdee4a493bda0953fe8a0cbe6948dff91e3ad67e

SHA512
8e8f7b9c7c2ee54749dbc389b0e24722cec0eba7207b7a7d5a1efe99ee8261c4cf708cdbdcca4d72f9a4ada0a1c50c1a46fca2acd189a20a9968ccfdb1cf42d9

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\gmp-widevinecdm\4.10.2449.0\widevinecdm.dll.sig

Filesize
1KB

MD5
dea1586a0ebca332d265dc5eda3c1c19

SHA1
29e8a8962a3e934fd6a804f9f386173f1b2f9be4

SHA256
98fbbc41d2143f8131e9b18fe7521f90d306b9ba95546a513c3293916b1fce60

SHA512
0e1e5e9af0790d38a29e9f1fbda7107c52f162c1503822d8860199c90dc8430b093d09aef74ac45519fb20aedb32c70c077d74a54646730b98e026073cedd0d6

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

Filesize
479B

MD5
49ddb419d96dceb9069018535fb2e2fc

SHA1
62aa6fea895a8b68d468a015f6e6ab400d7a7ca6

SHA256
2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539

SHA512
48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

Filesize
372B

MD5
8be33af717bb1b67fbd61c3f4b807e9e

SHA1
7cf17656d174d951957ff36810e874a134dd49e0

SHA256
e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd

SHA512
6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

Filesize
11.8MB

MD5
33bf7b0439480effb9fb212efce87b13

SHA1
cee50f2745edc6dc291887b6075ca64d716f495a

SHA256
8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e

SHA512
d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

Filesize
1KB

MD5
688bed3676d2104e7f17ae1cd2c59404

SHA1
952b2cdf783ac72fcb98338723e9afd38d47ad8e

SHA256
33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237

SHA512
7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

Filesize
1KB

MD5
937326fead5fd401f6cca9118bd9ade9

SHA1
4526a57d4ae14ed29b37632c72aef3c408189d91

SHA256
68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81

SHA512
b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\prefs-1.js

Filesize
7KB

MD5
df4369642091a981d80ae7d2f8c21b58

SHA1
89716d9f4a94a70b87a44a7aac1e93dd3e8afc53

SHA256
c1ed4c396cfe7f818e95a348e146d09b0665c50b09e8e9788d0720bc6cd92a3c

SHA512
ba35aecd36455da2b001305d15241c21c7b8f16c99fac760d18ee59a707181202015d95ca4a740bd1c2772698fd7e7b62e0e4c7503825160f7a8e57746fde54f

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\prefs-1.js

Filesize
9KB

MD5
5e79d06b0edef8c34fde750bfa98c90f

SHA1
595367e0bc3b311d7c5e94ee94849b32b750ed6c

SHA256
dc25c262106ff64cb738e1c7760bfd77da1c494704760b7e68a9800c0be7837f

SHA512
f450110164f202da286aa07c93cc2ca74f643ee89aca8a4fa982f7a25c7690fd8db30f7f9b9c1e46e835136febb0279bb261cded27419dda39ddfe41107c9e20

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\prefs-1.js

Filesize
9KB

MD5
100ef9d88edaf244dd02d0df32630106

SHA1
f01a504ff2df9f8cc9d6dca15f1faa34cc88a224

SHA256
f73aca2914bad60af73884f5585beb514f2280b78f182aac302e8f8c1ce58a92

SHA512
c416f8896a568e82c0cea718914b0563f8e3c468424f8c28f23dbd18a6c61247da158a0b335a1436bc3d1b1b1a366f83e296600e296a8cd2324ab44081f6fb44

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\prefs-1.js

Filesize
6KB

MD5
ad0c7dea2e1b696b6bfa67d66f4f95f6

SHA1
838caf356cc87f44a0551b468a1d23d05381a079

SHA256
141f0ec3004f300a378ce6aac4bf763dd924a09d33bfa3525157f4845106bc72

SHA512
a9efcccb560176278baed6578e5ce4cbbeab18b0843237ecbf1ea996d1ca839af30d357ca3126a121a0d4cd06ad35724aed673c4857d536d600563e96b2b6144

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\sessionCheckpoints.json

Filesize
90B

MD5
c4ab2ee59ca41b6d6a6ea911f35bdc00

SHA1
5942cd6505fc8a9daba403b082067e1cdefdfbc4

SHA256
00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2

SHA512
71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
1KB

MD5
7a703bc07544f50fb6ad8842e1dfe4ba

SHA1
04aa33b6a1617572474baab4ec7165d7d0ea2239

SHA256
52455e270ea8ac2e29ea1b998040c493f35a719d262059decd64e8cdc87aa2c0

SHA512
60c39bc6bc17770fe4e87d778795b631600aeb4bf7ab9ba9645a41e1c2cfdcafdc675f560c8acc6741aaf0f529ddbf6b581ddcb2a94a978dfbf5693c8c14b98f

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
987B

MD5
75d838228602e66b72048aebb47e8831

SHA1
225ba90b0e28bf02653259b75cf6f360aed589fb

SHA256
8493a70a52e52bc9c843420f37f084f20276c5991f915dacc841cd445e1bc8dd

SHA512
7a12ca22317caa5d37eb80421fe3c0a07ad2f46012d11839dcc8b76e046e48ca4469bc9be42f0b09e84a00294f4851f8dda98e49df7fa76d0986f9040e5dbdf8

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

Filesize
392KB

MD5
b3d0be3c9fca04cfe5cc05bc22be906f

SHA1
d86b82a37270b51d3670e1fdb5f67f3e4ed23993

SHA256
02961a2941c5ef476677939bddd2f290b8edbc510260e7fabd44fa6648ad822d

SHA512
e336a96b65dfeb9d5939ed75c1f0d6abcbf998235689aa812c4cca80e6a16b49cc1cc289756a2ef3ee42b70b820f74710f0b9195ea38512a7e7ee194a3b4f0ce

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

Filesize
864KB

MD5
22352e9d051ce0c7028b2c8190bf4210

SHA1
bdbd514d807863c02d6b680268d855b2fc085310

SHA256
3989bf4159558645fc6d755638b23ee5ceaedebd2a68d9d666db5042ff68970c

SHA512
47b2d219494c8fc67d402f581501cc1f72b0270a20d55fa902c354fbc17c05a8d6c77a1b3c3723a8b726a8dff7c9ccdb4445e66b7b587323e8544d593766c424

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\targeting.snapshot.json

Filesize
4KB

MD5
802dd2c2f43505c8d86cfb3bda777e0f

SHA1
a3a24bd82f39a9dc07198b64d6a1be687d75613a

SHA256
20e48df268eba908dd74ec92a4ae379fb3de8da481e26b4bffed9853c77e3d97

SHA512
afeaee22c1bfb1fbcd4701e27092391071b58077e39066153431acfe67de6424e6035965aad2c15b14297d52f704a1a8afc07610242de3208b690fa4613abd65

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\1txvui6d.default-release\xulstore.json

Filesize
143B

MD5
42ae14e1579f710711ee8732440d7450

SHA1
adff3fd18bdd2882fc170452cba534584bbb3ee4

SHA256
494835c25f129552820743b905a1b73d143e4b20cab8bf48272ec8a093a6d69c

SHA512
54e43914ba0de1c1210461c3c0acb005e663b1c60c265500fc6a867272ea04843570eac19e645e4f690209c5446b035b7c6fe824a585959c7cf7fe3ccbb2fc22

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI28802\VCRUNTIME140.dll

Filesize
106KB

MD5
49c96cecda5c6c660a107d378fdfc3d4

SHA1
00149b7a66723e3f0310f139489fe172f818ca8e

SHA256
69320f278d90efaaeb67e2a1b55e5b0543883125834c812c8d9c39676e0494fc

SHA512
e09e072f3095379b0c921d41d6e64f4f1cd78400594a2317cfb5e5dca03dedb5a8239ed89905c9e967d1acb376b0585a35addf6648422c7ddb472ce38b1ba60d

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI28802\_ctypes.pyd

Filesize
120KB

MD5
6114277c6fc040f68d25ca90e25924cd

SHA1
028179c77cb3ba29cd8494049421eaa4900ccd0e

SHA256
f07fe92ce85f7786f96a4d59c6ee5c05fe1db63a1889ba40a67e37069639b656

SHA512
76e8ebefb9ba4ea8dcab8fce50629946af4f2b3f2f43163f75483cfb0a97968478c8aaef1d6a37be85bfc4c91a859deda6da21d3e753daefe084a203d839353d

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI28802\_sqlite3.pyd

Filesize
117KB

MD5
a7df575bf69570944b004dfe150e8caf

SHA1
2fd19be98a07347d59afd78c167601479aac94bb

SHA256
b1223420e475348c0bfb90fae33fc44ce35d988270294158ec366893df221a4b

SHA512
18c381a4ded8d33271cbf0bea75af1c86c6d34cc436f68fb9342951c071c10d84cf9f96a0509c53e5886d47fed5bca113a7f7863f6873583daa7bb6af1aa9afa

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI28802\libffi-8.dll

Filesize
38KB

MD5
0f8e4992ca92baaf54cc0b43aaccce21

SHA1
c7300975df267b1d6adcbac0ac93fd7b1ab49bd2

SHA256
eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a

SHA512
6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI28802\python311.dll

Filesize
5.5MB

MD5
58e01abc9c9b5c885635180ed104fe95

SHA1
1c2f7216b125539d63bd111a7aba615c69deb8ba

SHA256
de1b95d2e951fc048c84684bc7df4346138910544ee335b61fc8e65f360c3837

SHA512
cd32c77191309d99aeed47699501b357b35669123f0dd70ed97c3791a009d1855ab27162db24a4bd9e719b68ee3b0539ee6db88e71abb9a2d4d629f87bc2c081

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI28802\ucrtbase.dll

Filesize
992KB

MD5
0e0bac3d1dcc1833eae4e3e4cf83c4ef

SHA1
4189f4459c54e69c6d3155a82524bda7549a75a6

SHA256
8a91052ef261b5fbf3223ae9ce789af73dfe1e9b0ba5bdbc4d564870a24f2bae

SHA512
a45946e3971816f66dd7ea3788aacc384a9e95011500b458212dc104741315b85659e0d56a41570731d338bdf182141c093d3ced222c007038583ceb808e26fd

Download Submit