Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

5

Static

static

3

27cc7906fa...2f.exe

windows7-x64

5

27cc7906fa...2f.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    109s
  • max time network
    115s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/12/2023, 04:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    27cc7906fa1032ab20cb6028438d8e2f.exe

  • Size

    92KB

  • MD5

    27cc7906fa1032ab20cb6028438d8e2f

  • SHA1

    16db7c755499e69713ea4e7b420a98d5e76a400a

  • SHA256

    283dca4b38d4ac08aea38c39ad094eab8bc1e929a3f3aca43fd0feba218c248e

  • SHA512

    86849150726360eff97d75c53e3bb6ff268e99185c72b00a92d726ed4a73476306fa82a231d39cf47ff5dab7ac465f0cc873faa0d6cfde924d5586f135276fad

  • SSDEEP

    1536:CPzuaRAc//////qidULaAl8pvPefv/PfpG/J/iccTGSmmp0ua/Zr3hASu8:ouaRAc//////qaAEWfv/neiccTGLmuuY

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
    "C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe"
    1⤵
      PID:4680
    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
      1⤵
        PID:3712
      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
        1⤵
          PID:1128
        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
          1⤵
            PID:4660
          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
            1⤵
              PID:2612
            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
              1⤵
                PID:5804
              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                1⤵
                  PID:6944
                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                  1⤵
                    PID:11036
                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                    1⤵
                      PID:11012
                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                      1⤵
                        PID:11004
                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                        1⤵
                          PID:10988
                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                          1⤵
                            PID:10972
                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                            1⤵
                              PID:10960
                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                              1⤵
                                PID:10952
                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                1⤵
                                  PID:10940
                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                  1⤵
                                    PID:10928
                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                      2⤵
                                        PID:3496
                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                      1⤵
                                        PID:10912
                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                        1⤵
                                          PID:10904
                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                          1⤵
                                            PID:10896
                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                            1⤵
                                              PID:10876
                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                              1⤵
                                                PID:10868
                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                1⤵
                                                  PID:10856
                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                  1⤵
                                                    PID:10840
                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                    1⤵
                                                      PID:10832
                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                      1⤵
                                                        PID:5288
                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                        1⤵
                                                          PID:11980
                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                          1⤵
                                                            PID:404
                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                            1⤵
                                                              PID:12060
                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                              1⤵
                                                                PID:12088
                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                  2⤵
                                                                    PID:3908
                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                  1⤵
                                                                    PID:12068
                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                    1⤵
                                                                      PID:12684
                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                      1⤵
                                                                        PID:12652
                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                        1⤵
                                                                          PID:12644
                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                          1⤵
                                                                            PID:12628
                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                            1⤵
                                                                              PID:12604
                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                              1⤵
                                                                                PID:12580
                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                1⤵
                                                                                  PID:12548
                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                  1⤵
                                                                                    PID:12540
                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                    1⤵
                                                                                      PID:12524
                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                      1⤵
                                                                                        PID:12492
                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                        1⤵
                                                                                          PID:12508
                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                          1⤵
                                                                                            PID:11824
                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                            1⤵
                                                                                              PID:14688
                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                2⤵
                                                                                                  PID:14004
                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                1⤵
                                                                                                  PID:11024
                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                  1⤵
                                                                                                    PID:11060
                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                    1⤵
                                                                                                      PID:9152
                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                      1⤵
                                                                                                        PID:13908
                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                        1⤵
                                                                                                          PID:13868
                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                          1⤵
                                                                                                            PID:13844
                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                            1⤵
                                                                                                              PID:13808
                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                              1⤵
                                                                                                                PID:13788
                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                1⤵
                                                                                                                  PID:13752
                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                  1⤵
                                                                                                                    PID:13720
                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                    1⤵
                                                                                                                      PID:13704
                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                      1⤵
                                                                                                                        PID:13632
                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                        1⤵
                                                                                                                          PID:13600
                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                          1⤵
                                                                                                                            PID:6040
                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                            1⤵
                                                                                                                              PID:15344
                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                              1⤵
                                                                                                                                PID:15336
                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                1⤵
                                                                                                                                  PID:8908
                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                    2⤵
                                                                                                                                      PID:28540
                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                    1⤵
                                                                                                                                      PID:6172
                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                      1⤵
                                                                                                                                        PID:4676
                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                        1⤵
                                                                                                                                          PID:8188
                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                          1⤵
                                                                                                                                            PID:8008
                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                            1⤵
                                                                                                                                              PID:8420
                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                              1⤵
                                                                                                                                                PID:7104
                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                1⤵
                                                                                                                                                  PID:13620
                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                  1⤵
                                                                                                                                                    PID:13596
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                    1⤵
                                                                                                                                                      PID:15876
                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                      1⤵
                                                                                                                                                        PID:19524
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                        1⤵
                                                                                                                                                          PID:19496
                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                          1⤵
                                                                                                                                                            PID:19488
                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                            1⤵
                                                                                                                                                              PID:23060
                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                              1⤵
                                                                                                                                                                PID:23052
                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                1⤵
                                                                                                                                                                  PID:23044
                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                  1⤵
                                                                                                                                                                    PID:23032
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                    1⤵
                                                                                                                                                                      PID:23024
                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                      1⤵
                                                                                                                                                                        PID:19532
                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                        1⤵
                                                                                                                                                                          PID:11512
                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                          1⤵
                                                                                                                                                                            PID:9780
                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                            1⤵
                                                                                                                                                                              PID:12496
                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                              1⤵
                                                                                                                                                                                PID:3880
                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                1⤵
                                                                                                                                                                                  PID:19188
                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                  1⤵
                                                                                                                                                                                    PID:10300
                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                    1⤵
                                                                                                                                                                                      PID:10120
                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                      1⤵
                                                                                                                                                                                        PID:15256
                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                        1⤵
                                                                                                                                                                                          PID:14004
                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                          1⤵
                                                                                                                                                                                            PID:19008
                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                            1⤵
                                                                                                                                                                                              PID:18988
                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                              1⤵
                                                                                                                                                                                                PID:12648
                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                1⤵
                                                                                                                                                                                                  PID:14300
                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                    PID:15188
                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                      PID:6436
                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                        PID:12384
                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                          PID:14232
                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                            PID:6420
                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                              PID:9932
                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                PID:29520
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                  PID:31608
                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                    PID:34496
                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                      PID:34488
                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                        PID:34444
                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                          PID:34432
                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                            PID:34424
                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                PID:42168
                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                PID:34416
                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                  PID:34404
                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                    PID:34396
                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                      PID:34380
                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                        PID:34372
                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                          PID:34360
                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                            PID:34344
                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                              PID:34336
                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                PID:34324
                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                  PID:34312
                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                    PID:34304
                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                      PID:34292
                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                        PID:9524
                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                          PID:34760
                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                            PID:37848
                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                              PID:37792
                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                PID:40424
                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                  PID:40412
                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                    PID:40404
                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                      PID:40396
                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                        PID:40388
                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                          PID:40380
                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                            PID:40372
                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                              PID:40364
                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                PID:40356
                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                  PID:40348
                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                    PID:40340
                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                      PID:40332
                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                        PID:40324
                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                          PID:40316
                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                            PID:40308
                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                              PID:40300
                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                PID:40292
                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                  PID:38372
                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                    PID:42756
                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                        PID:9648
                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                        PID:28320
                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                          PID:20248
                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                            PID:18772
                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                PID:39868
                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                PID:32660
                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                  PID:14680
                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                    PID:29676
                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                      PID:31268
                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                        PID:22988
                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                          PID:14892
                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\WerFault.exe
                                                                                                                                                                                                                                                                                                                          C:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 38896 -ip 38896
                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                            PID:15216
                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                              PID:12052
                                                                                                                                                                                                                                                                                                                            • C:\Windows\SysWOW64\WerFault.exe
                                                                                                                                                                                                                                                                                                                              C:\Windows\SysWOW64\WerFault.exe -pss -s 496 -p 38500 -ip 38500
                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                PID:5208
                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                  PID:20104
                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                    PID:32604
                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                      PID:7396
                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                        PID:32800
                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                          PID:30428
                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                            PID:32508
                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                              PID:33244
                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                                PID:33788
                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                  PID:26964
                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                    PID:33800
                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                      PID:29752
                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                        PID:14572
                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\SysWOW64\WerFault.exe
                                                                                                                                                                                                                                                                                                                                                        C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 40260 -ip 40260
                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                          PID:28304
                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\WerFault.exe
                                                                                                                                                                                                                                                                                                                                                          C:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 1580 -ip 1580
                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                            PID:42248
                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                                              PID:11008
                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                                                PID:44808
                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                  PID:44892
                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                                    PID:7488
                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                      PID:2212
                                                                                                                                                                                                                                                                                                                                                                    • C:\Windows\SysWOW64\WerFault.exe
                                                                                                                                                                                                                                                                                                                                                                      C:\Windows\SysWOW64\WerFault.exe -u -p 38896 -s 348
                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                      • Program crash
                                                                                                                                                                                                                                                                                                                                                                      PID:12932
                                                                                                                                                                                                                                                                                                                                                                    • C:\Windows\SysWOW64\WerFault.exe
                                                                                                                                                                                                                                                                                                                                                                      C:\Windows\SysWOW64\WerFault.exe -u -p 38500 -s 348
                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                      • Program crash
                                                                                                                                                                                                                                                                                                                                                                      PID:35428
                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                        PID:12576
                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                          PID:2604
                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                                            PID:35432
                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                                                              PID:29216
                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                                                                PID:15964
                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                  PID:30644
                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                                                    PID:30700
                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                      PID:30744
                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                        PID:21524
                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                          PID:3344
                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                                                            PID:9704
                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                                                                              PID:16828
                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                                                                                PID:11288
                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                                  PID:25064
                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                                                                    PID:19528
                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                      PID:13840
                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                                        PID:21532
                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                          PID:7836
                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                                                                            PID:17932
                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                                                                                              PID:15812
                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                PID:33332
                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                  PID:16148
                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                    PID:42100
                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                      PID:27752
                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                        PID:20004
                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                          PID:21812
                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                            PID:39176
                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                              PID:24192
                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                PID:30392
                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:34728
                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:7992
                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:36464
                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:9728
                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:39900
                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1748
                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:39496
                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:30768
                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:29112
                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:35256
                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:22380
                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:39288
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:23160
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:29116
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:9412
                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:43548
                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:20648
                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:9868
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:28296
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:15912
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:7144
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:22368
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:20164
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:40168
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:19980
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:17256
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:24084
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:19144
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:44908
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:23888
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:22700
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:21640
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:29920
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:33012
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:34292
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:9392
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\SysWOW64\WerFault.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\SysWOW64\WerFault.exe -pss -s 688 -p 11748 -ip 11748
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6284
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:23192
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:11164
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\27cc7906fa1032ab20cb6028438d8e2f.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:20964

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Network

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              MITRE ATT&CK Matrix

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Replay Monitor

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Downloads

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/1660-61-0x0000000010000000-0x000000001001F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/2588-60-0x0000000010000000-0x000000001001F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4072-26-0x0000000010000000-0x000000001001F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • memory/4660-62-0x0000000010000000-0x000000001001F000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                124KB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Download