647f46899b472f8a3ce181bd07ab2219a56e965bf4e24a0b489edb2bc5c8aa8d

Analysis

max time kernel
150s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
28-02-2024 06:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ab337d28b494a966f107fc428d71f78b.exe
Size

1.8MB
MD5

ab337d28b494a966f107fc428d71f78b
SHA1

5c77dc1f673fbfb9d45de2a63aa16616f80b7a12
SHA256

647f46899b472f8a3ce181bd07ab2219a56e965bf4e24a0b489edb2bc5c8aa8d
SHA512

98ea77a94465780030eb05189ff9061790e438732b2b1245559c5ea0ad1c91f5c1458cf14d50f05c6ef4e97f3e1ab0a6c73109980644cd7ea9ae9a1555eec71a
SSDEEP

6144:Hrn8am/jie/+9h4/cdIG4Uues+f5PfZlfTBoIbY5RUvNjC4LBtJrJyCjSJlIyfh+:Hr

Score

7^/10

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

ab337d28b494a966f107fc428d71f78b.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-3045580317-3728985860-206385570-1000\Control Panel\International\Geo\Nation	ab337d28b494a966f107fc428d71f78b.exe

Suspicious use of NtSetInformationThreadHideFromDebugger 13 IoCs

Processes:

ab337d28b494a966f107fc428d71f78b.exe

pid	process
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082
Delays execution with timeout.exe 3 IoCs
evasion

Processes:

timeout.exetimeout.exetimeout.exe

pid process

4696 timeout.exe
2712 timeout.exe
4904 timeout.exe

pid	process
4696	timeout.exe
2712	timeout.exe
4904	timeout.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

ab337d28b494a966f107fc428d71f78b.exe

pid	process
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe
216	ab337d28b494a966f107fc428d71f78b.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

ab337d28b494a966f107fc428d71f78b.exe

description pid process

Token: SeDebugPrivilege 216 ab337d28b494a966f107fc428d71f78b.exe

description	pid	process
Token: SeDebugPrivilege	216	ab337d28b494a966f107fc428d71f78b.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

ab337d28b494a966f107fc428d71f78b.execmd.execmd.execmd.exe

C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
"C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
1⤵
- Checks computer location settings
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:216
- C:\Windows\SysWOW64\cmd.exe
  "C:\Windows\System32\cmd.exe" /c timeout 1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1328
- - C:\Windows\SysWOW64\timeout.exe
    timeout 1
    3⤵
    - Delays execution with timeout.exe
    PID:2712
- C:\Windows\SysWOW64\cmd.exe
  "C:\Windows\System32\cmd.exe" /c timeout 1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2532
- - C:\Windows\SysWOW64\timeout.exe
    timeout 1
    3⤵
    - Delays execution with timeout.exe
    PID:4904
- C:\Windows\SysWOW64\cmd.exe
  "C:\Windows\System32\cmd.exe" /c timeout 1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4716
- - C:\Windows\SysWOW64\timeout.exe
    timeout 1
    3⤵
    - Delays execution with timeout.exe
    PID:4696
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:616
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3224
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3692
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3892
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4120
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2908
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4092
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1544
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1468
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1732
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2084
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4684
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2924
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4728
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4188
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4060
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1696
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4488
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2188
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2800
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3260
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1744
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1080
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1460
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4820
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:860
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3588
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2964
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4472
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3832
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3284
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2360
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3380
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2384
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2344
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4496
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1568
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2436
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1840
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3396
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3372
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3192
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3152
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4392
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2372
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4048
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3220
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3168
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2260
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:452
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3780
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1936
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3652
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1512
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:620
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3736
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5020
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2628
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4080
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3468
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4036
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3728
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1548
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2400
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3732
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5116
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3684
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3312
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4888
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1844
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1896
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2692
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2004
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:888
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3580
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3040
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:748
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4752
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4168
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1164
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3668
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2500
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4972
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3436
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3492
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2216
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4380
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5016
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1824
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2548
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4856
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2684
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2524
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1904
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2052
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5040
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3660
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4204
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3712
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4432
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4936
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3268
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2528
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3856
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1816
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2172
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4768
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2616
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:736
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4368
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1772
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5052
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4792
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3928
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1560
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2688
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3304
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3720
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4240
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3408
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1996
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4400
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5032
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4512
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4356
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4608
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3672
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2356
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4824
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2288
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2596
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4876
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1704
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3552
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:996
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4128
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1692
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2268
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2676
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5100
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1828
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4860
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1680
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2712
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2640
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2140
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4504
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4700
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2872
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4312
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4336
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4904
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4568
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4956
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4224
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4756
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3208
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4144
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4696
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:828
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2020
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:956
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2064
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3068
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1580
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1820
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:1952
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4652
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4968
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:992
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4044
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4108
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3124
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2748
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3708
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5128
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5136
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5144
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5152
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5160
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5168
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5176
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5184
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5192
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5200
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5208
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5216
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5224
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5232
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5240
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5248
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5256
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5264
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5272
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5280
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5288
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5296
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5304
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5312
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5320
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5328
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5336
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5344
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5352
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5360
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5368
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5376
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5384
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5392
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5400
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5408
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5416
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5424
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5432
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5440
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5448
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5456
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5464
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5472
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5480
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5488
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5496
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5504
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5512
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5520
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5528
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5536
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5544
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5552
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5560
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5568
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5576
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5584
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5592
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5600
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5608
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5616
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5624
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5632
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5640
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5648
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5656
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5664
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5672
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5680
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5688
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5696
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5704
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5712
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5720
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5728
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5736
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5744
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5752
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5760
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5768
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5776
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5784
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5792
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5800
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5808
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5816
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5824
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5832
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5840
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5848
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5856
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5864
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5872
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5880
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5888
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5896
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5904
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5912
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5920
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5928
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5936
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5944
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5952
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5960
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5968
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5976
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5984
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5992
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6000
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6008
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6016
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6024
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6032
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6040
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6048
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6060
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6068
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6076
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6084
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6092
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6100
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6108
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6116
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6124
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6132
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6140
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6148
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6156
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6164
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6172
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6180
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6188
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6196
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6204
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6212
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6220
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6228
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6236
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6244
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6252
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6260
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6268
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6276
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6284
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6292
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6300
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6312
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6320
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6328
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6336
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6344
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6352
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6360
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6368
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6376
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6384
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6392
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6400
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6408
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6416
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6424
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6432
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6440
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6448
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6456
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6464
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6472
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6480
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6488
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6496
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6504
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6512
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6520
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6528
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6536
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6544
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6552
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6560
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6568
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6576
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6584
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6592
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6600
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6608
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6616
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6624
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6632
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6640
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6648
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6656
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6664
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6672
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6680
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6688
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6696
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6704
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6712
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6720
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6728
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6736
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6744
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6752
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6760
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6768
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6776
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6784
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6792
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6800
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6808
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6816
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6824
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6832
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6840
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6848
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6856
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6864
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6872
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6880
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6888
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6896
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6904
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6912
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6920
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6928
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6936
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6944
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6952
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6960
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6968
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6976
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6984
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:6992
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7000
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7008
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7016
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7024
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7032
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7040
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7048
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7056
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7068
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7084
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7092
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7100
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7108
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7116
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7124
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7132
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7140
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7148
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7156
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7164
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7172
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7180
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7188
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7196
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7204
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7212
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7220
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7228
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7236
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7244
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7252
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7260
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7268
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7276
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7284
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7292
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7300
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7308
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7316
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7324
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7332
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7340
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7348
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7356
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7364
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7372
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7380
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7388
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7396
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7404
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7412
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7420
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7428
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7436
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7444
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7452
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7460
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7468
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7476
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7484
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7492
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7500
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7508
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7516
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7524
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7532
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7540
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7548
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7556
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7564
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7572
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7580
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7588
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7596
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7604
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7612
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7620
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7628
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7636
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7644
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7652
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7660
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7672
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7680
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7688
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7696
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7704
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7712
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7720
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7728
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7736
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7744
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7752
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7760
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7768
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7776
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7784
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7792
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7800
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7808
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7816
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7824
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7832
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7840
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7848
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7856
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7864
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7872
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7880
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7888
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7896
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7904
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7912
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7920
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7928
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7936
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7944
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7952
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7960
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7968
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7976
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7984
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7992
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8000
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8008
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8016
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8024
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8032
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8040
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8048
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8064
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8056
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8072
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8080
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8088
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8096
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8104
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8112
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8120
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8128
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8136
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8144
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8152
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8160
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8172
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8180
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8188
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:7668
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8200
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8208
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8216
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8224
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8232
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8240
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8248
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8256
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8264
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8272
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8280
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8288
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8296
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8304
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8312
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8320
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8328
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8336
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8344
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8352
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8360
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8368
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8376
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8384
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8392
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8400
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8408
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8416
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8424
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8432
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8440
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8448
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8456
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8464
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8472
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8480
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8488
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8496
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8504
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8512
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8520
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8528
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8536
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8544
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8552
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8560
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8568
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8576
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8584
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8592
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8600
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8608
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8616
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8624
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8632
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8640
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8648
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8656
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8664
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8676
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8684
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8692
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8700
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8708
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8716
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8724
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8732
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8740
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8748
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8756
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8764
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8772
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8780
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8788
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8796
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8804
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8816
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8824
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8832
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8840
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8848
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8856
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8864
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8872
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8880
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8888
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8896
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8904
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8912
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8924
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8932
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8940
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8948
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8956
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8964
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8972
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8980
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8988
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8996
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9004
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9012
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9020
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9028
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9036
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9044
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9052
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9060
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9068
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9076
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9084
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9092
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9100
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9108
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9116
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9124
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9132
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9140
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9148
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9156
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9164
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9172
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9180
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9188
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9196
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9204
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9212
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8920
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4444
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:3700
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:2364
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9220
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9228
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9236
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9244
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9252
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9308
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9300
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9292
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9284
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9276
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9268
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9260
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9316
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9324
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9332
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9340
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9348
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9356
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9364
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9372
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9380
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9388
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9396
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9404
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9412
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9420
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9428
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9436
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9444
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9452
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9460
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9468
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9476
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9484
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9492
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9500
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9508
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9516
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9524
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9532
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9540
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9548
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9556
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9564
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9572
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9580
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9588
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9596
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9604
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9612
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9620
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9628
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9636
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9644
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9652
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9660
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9668
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9676
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9684
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9692
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9700
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9708
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9716
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9724
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9732
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9740
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9748
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9756
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9764
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9772
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9780
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9788
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9796
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9804
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9812
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9820
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9828
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9836
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9844
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9852
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9860
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9868
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9876
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9884
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9892
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9900
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9908
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9916
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9924
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9932
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9940
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9948
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9956
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9964
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9972
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9980
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9988
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:9996
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10004
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10012
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10020
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10028
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10036
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10044
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10052
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10060
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10068
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10076
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10084
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10092
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10100
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10108
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10116
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10124
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10132
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10140
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10148
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10156
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10164
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10172
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10180
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10188
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10196
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10204
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10212
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10220
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10228
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10236
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:8168
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4716
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:5068
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:4840
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10248
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10256
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10264
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10272
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10280
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10288
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10296
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10304
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10312
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10320
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10328
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10336
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10344
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10356
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10364
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10372
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10380
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10388
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10396
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10404
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10412
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10420
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10428
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10436
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10444
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10452
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10460
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10468
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10476
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10484
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10492
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10500
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10508
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10516
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10524
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10532
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10540
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10548
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10556
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10564
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10572
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10580
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10588
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10596
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10604
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10612
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10620
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10628
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10636
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10644
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10652
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10660
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10668
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10676
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10684
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10692
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10700
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10708
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10716
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10724
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10732
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10740
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10748
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10756
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10764
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10772
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10780
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10788
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10796
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10804
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10812
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10820
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10828
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10836
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10844
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10852
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10860
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10868
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10876
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10884
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10892
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10900
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10908
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10916
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10924
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10932
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10940
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10948
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10956
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10964
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10972
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10980
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10988
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:10996
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11004
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11012
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11020
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11028
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11036
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11044
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11052
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11060
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11068
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11076
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11084
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11092
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11100
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11108
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11116
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11148
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11156
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11140
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11132
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11124
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11164
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11172
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11180
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11188
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11196
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11204
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11212
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11220
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11228
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11236
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11244
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11252
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11260
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11272
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11280
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11288
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11296
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11304
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11312
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11320
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11328
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11336
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11344
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11352
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11360
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11368
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11376
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11384
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11392
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11400
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11408
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11416
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11424
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11432
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11448
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11440
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11456
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11464
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11472
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11480
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11488
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11496
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11504
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11512
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11520
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11528
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11536
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11544
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11552
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11560
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11568
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11576
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11584
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11592
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11600
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11608
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11616
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11624
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11632
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11640
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11648
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11656
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11664
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11672
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11680
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11688
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11696
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11704
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11712
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11720
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11728
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11736
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11744
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11752
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11760
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11768
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11776
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11784
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11792
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11800
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11808
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11816
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11824
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11832
- C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe
  "C:\Users\Admin\AppData\Local\Temp\ab337d28b494a966f107fc428d71f78b.exe"
  2⤵
  PID:11840

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/216-0-0x00000000001F0000-0x00000000003C0000-memory.dmp

Filesize
1.8MB

Download
memory/216-1-0x0000000075110000-0x00000000758C0000-memory.dmp

Filesize
7.7MB

Download
memory/216-2-0x0000000004BE0000-0x0000000004C7C000-memory.dmp

Filesize
624KB

Download
memory/216-3-0x0000000005230000-0x00000000057D4000-memory.dmp

Filesize
5.6MB

Download
memory/216-4-0x0000000004F60000-0x0000000004FF2000-memory.dmp

Filesize
584KB

Download
memory/216-5-0x0000000005960000-0x0000000005970000-memory.dmp

Filesize
64KB

Download
memory/216-6-0x0000000004F10000-0x0000000004F1A000-memory.dmp

Filesize
40KB

Download
memory/216-7-0x00000000057E0000-0x0000000005826000-memory.dmp

Filesize
280KB

Download
memory/216-28-0x0000000075110000-0x00000000758C0000-memory.dmp

Filesize
7.7MB

Download
memory/216-30-0x0000000005960000-0x0000000005970000-memory.dmp

Filesize
64KB

Download
memory/4768-8-0x0000000000400000-0x0000000000400000-memory.dmp

Download

description	pid	process	target process
PID 216 wrote to memory of 1328	216	ab337d28b494a966f107fc428d71f78b.exe	cmd.exe
PID 216 wrote to memory of 1328	216	ab337d28b494a966f107fc428d71f78b.exe	cmd.exe
PID 216 wrote to memory of 1328	216	ab337d28b494a966f107fc428d71f78b.exe	cmd.exe
PID 1328 wrote to memory of 2712	1328	cmd.exe	timeout.exe
PID 1328 wrote to memory of 2712	1328	cmd.exe	timeout.exe
PID 1328 wrote to memory of 2712	1328	cmd.exe	timeout.exe
PID 216 wrote to memory of 2532	216	ab337d28b494a966f107fc428d71f78b.exe	cmd.exe
PID 216 wrote to memory of 2532	216	ab337d28b494a966f107fc428d71f78b.exe	cmd.exe
PID 216 wrote to memory of 2532	216	ab337d28b494a966f107fc428d71f78b.exe	cmd.exe
PID 2532 wrote to memory of 4904	2532	cmd.exe	timeout.exe
PID 2532 wrote to memory of 4904	2532	cmd.exe	timeout.exe
PID 2532 wrote to memory of 4904	2532	cmd.exe	timeout.exe
PID 216 wrote to memory of 4716	216	ab337d28b494a966f107fc428d71f78b.exe	cmd.exe
PID 216 wrote to memory of 4716	216	ab337d28b494a966f107fc428d71f78b.exe	cmd.exe
PID 216 wrote to memory of 4716	216	ab337d28b494a966f107fc428d71f78b.exe	cmd.exe
PID 4716 wrote to memory of 4696	4716	cmd.exe	timeout.exe
PID 4716 wrote to memory of 4696	4716	cmd.exe	timeout.exe
PID 4716 wrote to memory of 4696	4716	cmd.exe	timeout.exe
PID 216 wrote to memory of 616	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 616	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 616	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 3224	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 3224	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 3224	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 3692	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 3692	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 3692	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 3892	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 3892	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 3892	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 4120	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 4120	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 4120	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 2908	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 2908	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 2908	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 4092	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 4092	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 4092	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 1544	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 1544	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 1544	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 1468	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 1468	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 1468	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 1732	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 1732	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 1732	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 2084	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 2084	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 2084	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 4684	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 4684	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 4684	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 2924	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 2924	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 2924	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 4728	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 4728	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 4728	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 4188	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 4188	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 4188	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe
PID 216 wrote to memory of 4060	216	ab337d28b494a966f107fc428d71f78b.exe	ab337d28b494a966f107fc428d71f78b.exe