0b98e645f29f6ebf364734cb2545e4623800e0f420ea1324b37eb55742a9f731

Analysis

max time kernel
109s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
21-05-2024 16:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

script.media.aggregator/bin/u8runner.exe
Size

21KB
MD5

24735674aa04d36f56c748d89f40bfc8
SHA1

d8ea00e14a2caced07dde803dad2f702759a93e1
SHA256

97eb4203ee0b6b789388b55e0550c04865d006e6df3ff7d29edadb11b2bffa45
SHA512

030a43a7cba0c6e75790693160fe4b8ea5802f34c03e6fcde25a44dca7bdbe32da2b0a3643f816a6175d144173d09d69a52e6ed48b8699d1469aa9e9d307fe09
SSDEEP

384:ROV3Ohl55MJ+PtLcFuoInpqbiEB1+9GfrBWp+G6X:gJRQFHyiEB17frm6X

Score

7^/10

Malware Config

Signatures

Checks computer location settings 2 TTPs 64 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

u8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exeu8runner.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation	u8runner.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

description	pid	process	target process
PID 4592 wrote to memory of 3924	4592	u8runner.exe	u8runner.exe
PID 4592 wrote to memory of 3924	4592	u8runner.exe	u8runner.exe
PID 4592 wrote to memory of 3924	4592	u8runner.exe	u8runner.exe
PID 3924 wrote to memory of 408	3924	u8runner.exe	u8runner.exe
PID 3924 wrote to memory of 408	3924	u8runner.exe	u8runner.exe
PID 3924 wrote to memory of 408	3924	u8runner.exe	u8runner.exe
PID 408 wrote to memory of 4264	408	u8runner.exe	u8runner.exe
PID 408 wrote to memory of 4264	408	u8runner.exe	u8runner.exe
PID 408 wrote to memory of 4264	408	u8runner.exe	u8runner.exe
PID 4264 wrote to memory of 2176	4264	u8runner.exe	u8runner.exe
PID 4264 wrote to memory of 2176	4264	u8runner.exe	u8runner.exe
PID 4264 wrote to memory of 2176	4264	u8runner.exe	u8runner.exe
PID 2176 wrote to memory of 2240	2176	u8runner.exe	u8runner.exe
PID 2176 wrote to memory of 2240	2176	u8runner.exe	u8runner.exe
PID 2176 wrote to memory of 2240	2176	u8runner.exe	u8runner.exe
PID 2240 wrote to memory of 5080	2240	u8runner.exe	u8runner.exe
PID 2240 wrote to memory of 5080	2240	u8runner.exe	u8runner.exe
PID 2240 wrote to memory of 5080	2240	u8runner.exe	u8runner.exe
PID 5080 wrote to memory of 4256	5080	u8runner.exe	u8runner.exe
PID 5080 wrote to memory of 4256	5080	u8runner.exe	u8runner.exe
PID 5080 wrote to memory of 4256	5080	u8runner.exe	u8runner.exe
PID 4256 wrote to memory of 1212	4256	u8runner.exe	u8runner.exe
PID 4256 wrote to memory of 1212	4256	u8runner.exe	u8runner.exe
PID 4256 wrote to memory of 1212	4256	u8runner.exe	u8runner.exe
PID 1212 wrote to memory of 2504	1212	u8runner.exe	u8runner.exe
PID 1212 wrote to memory of 2504	1212	u8runner.exe	u8runner.exe
PID 1212 wrote to memory of 2504	1212	u8runner.exe	u8runner.exe
PID 2504 wrote to memory of 4928	2504	u8runner.exe	u8runner.exe
PID 2504 wrote to memory of 4928	2504	u8runner.exe	u8runner.exe
PID 2504 wrote to memory of 4928	2504	u8runner.exe	u8runner.exe
PID 4928 wrote to memory of 2304	4928	u8runner.exe	Conhost.exe
PID 4928 wrote to memory of 2304	4928	u8runner.exe	Conhost.exe
PID 4928 wrote to memory of 2304	4928	u8runner.exe	Conhost.exe
PID 2304 wrote to memory of 3520	2304	u8runner.exe	u8runner.exe
PID 2304 wrote to memory of 3520	2304	u8runner.exe	u8runner.exe
PID 2304 wrote to memory of 3520	2304	u8runner.exe	u8runner.exe
PID 3520 wrote to memory of 3268	3520	u8runner.exe	u8runner.exe
PID 3520 wrote to memory of 3268	3520	u8runner.exe	u8runner.exe
PID 3520 wrote to memory of 3268	3520	u8runner.exe	u8runner.exe
PID 3268 wrote to memory of 904	3268	u8runner.exe	u8runner.exe
PID 3268 wrote to memory of 904	3268	u8runner.exe	u8runner.exe
PID 3268 wrote to memory of 904	3268	u8runner.exe	u8runner.exe
PID 904 wrote to memory of 4660	904	u8runner.exe	u8runner.exe
PID 904 wrote to memory of 4660	904	u8runner.exe	u8runner.exe
PID 904 wrote to memory of 4660	904	u8runner.exe	u8runner.exe
PID 4660 wrote to memory of 3548	4660	u8runner.exe	u8runner.exe
PID 4660 wrote to memory of 3548	4660	u8runner.exe	u8runner.exe
PID 4660 wrote to memory of 3548	4660	u8runner.exe	u8runner.exe
PID 3548 wrote to memory of 3276	3548	u8runner.exe	u8runner.exe
PID 3548 wrote to memory of 3276	3548	u8runner.exe	u8runner.exe
PID 3548 wrote to memory of 3276	3548	u8runner.exe	u8runner.exe
PID 3276 wrote to memory of 2140	3276	u8runner.exe	u8runner.exe
PID 3276 wrote to memory of 2140	3276	u8runner.exe	u8runner.exe
PID 3276 wrote to memory of 2140	3276	u8runner.exe	u8runner.exe
PID 2140 wrote to memory of 3392	2140	u8runner.exe	u8runner.exe
PID 2140 wrote to memory of 3392	2140	u8runner.exe	u8runner.exe
PID 2140 wrote to memory of 3392	2140	u8runner.exe	u8runner.exe
PID 3392 wrote to memory of 640	3392	u8runner.exe	u8runner.exe
PID 3392 wrote to memory of 640	3392	u8runner.exe	u8runner.exe
PID 3392 wrote to memory of 640	3392	u8runner.exe	u8runner.exe
PID 640 wrote to memory of 668	640	u8runner.exe	u8runner.exe
PID 640 wrote to memory of 668	640	u8runner.exe	u8runner.exe
PID 640 wrote to memory of 668	640	u8runner.exe	u8runner.exe
PID 668 wrote to memory of 3016	668	u8runner.exe	u8runner.exe

C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
"C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4592
- C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
  "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3924
- - C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
    "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
    3⤵
    - Checks computer location settings
    - Suspicious use of WriteProcessMemory
    PID:408
  - - C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
      "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
      4⤵
      Checks computer location settings
      Suspicious use of WriteProcessMemory
      PID:4264
    - - C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:2176
      - C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:2240
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:5080
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:4256
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:1212
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:2504
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        11⤵
        Checks computer location settings
        Suspicious use of WriteProcessMemory
        
        PID:4928
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:2304
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:3520
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:3268
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:904
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:4660
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:3548
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:3276
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:2140
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:3392
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        21⤵
        Checks computer location settings
        Suspicious use of WriteProcessMemory
        
        PID:640
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:668
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        23⤵
        
        PID:3016
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        24⤵
        
        PID:2428
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        25⤵
        
        PID:4088
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        26⤵
        Checks computer location settings
        
        PID:4140
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        27⤵
        
        PID:5092
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        28⤵
        Checks computer location settings
        
        PID:520
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        29⤵
        
        PID:1860
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        30⤵
        
        PID:804
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        31⤵
        
        PID:2304
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        31⤵
        
        PID:4408
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        32⤵
        
        PID:3524
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        33⤵
        
        PID:2284
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        34⤵
        
        PID:3792
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        35⤵
        
        PID:800
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        36⤵
        
        PID:4440
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        37⤵
        
        PID:1456
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        38⤵
        
        PID:2456
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        39⤵
        
        PID:4492
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        40⤵
        
        PID:3016
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        41⤵
        Checks computer location settings
        
        PID:1908
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        42⤵
        
        PID:4164
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        43⤵
        
        PID:4500
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        44⤵
        
        PID:4688
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        45⤵
        
        PID:1196
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        46⤵
        Checks computer location settings
        
        PID:4576
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        47⤵
        Checks computer location settings
        
        PID:4516
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        48⤵
        Checks computer location settings
        
        PID:4564
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        49⤵
        
        PID:3272
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        50⤵
        
        PID:112
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        51⤵
        Checks computer location settings
        
        PID:1652
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        52⤵
        
        PID:848
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        53⤵
        
        PID:3596
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        54⤵
        
        PID:2800
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        55⤵
        
        PID:4324
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        56⤵
        
        PID:4148
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        57⤵
        
        PID:1232
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        58⤵
        
        PID:3208
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        59⤵
        
        PID:804
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        59⤵
        
        PID:1856
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        60⤵
        
        PID:3796
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        61⤵
        
        PID:856
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        62⤵
        
        PID:1752
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        63⤵
        
        PID:1896
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        64⤵
        
        PID:1192
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        65⤵
        
        PID:4084
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        66⤵
        
        PID:4440
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        66⤵
        Checks computer location settings
        
        PID:4920
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        67⤵
        
        PID:4712
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        68⤵
        
        PID:848
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        69⤵
        
        PID:4568
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        70⤵
        Checks computer location settings
        
        PID:4220
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        71⤵
        Checks computer location settings
        
        PID:2904
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        72⤵
        
        PID:4164
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        72⤵
        
        PID:2580
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        73⤵
        Checks computer location settings
        
        PID:4784
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        74⤵
        Checks computer location settings
        
        PID:4652
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        75⤵
        
        PID:2128
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        76⤵
        
        PID:2156
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        77⤵
        
        PID:2872
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        78⤵
        
        PID:616
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        79⤵
        
        PID:4048
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        80⤵
        
        PID:3704
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        81⤵
        
        PID:4512
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        82⤵
        
        PID:2496
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        83⤵
        Checks computer location settings
        
        PID:640
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        84⤵
        
        PID:212
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        85⤵
        
        PID:1656
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        86⤵
        
        PID:1472
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        87⤵
        Checks computer location settings
        
        PID:4140
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        88⤵
        
        PID:3300
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        89⤵
        
        PID:1364
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        90⤵
        
        PID:2592
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        91⤵
        
        PID:5104
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        92⤵
        
        PID:4652
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        92⤵
        
        PID:5056
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        93⤵
        
        PID:4412
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        94⤵
        
        PID:2648
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        95⤵
        
        PID:1548
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        96⤵
        
        PID:1896
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        97⤵
        
        PID:4820
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        98⤵
        
        PID:1192
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        98⤵
        
        PID:4620
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        99⤵
        
        PID:4496
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        100⤵
        Checks computer location settings
        
        PID:4540
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        101⤵
        
        PID:5064
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        102⤵
        
        PID:2324
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        103⤵
        
        PID:3596
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        104⤵
        
        PID:1656
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        104⤵
        Checks computer location settings
        
        PID:3968
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        105⤵
        
        PID:4828
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        106⤵
        
        PID:3916
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        107⤵
        
        PID:624
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        108⤵
        Checks computer location settings
        
        PID:2972
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        109⤵
        
        PID:4576
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        110⤵
        
        PID:4080
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        111⤵
        
        PID:1164
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        112⤵
        
        PID:264
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        113⤵
        
        PID:616
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        114⤵
        Checks computer location settings
        
        PID:2432
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        115⤵
        
        PID:3856
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        116⤵
        
        PID:4512
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        117⤵
        
        PID:2496
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        118⤵
        Checks computer location settings
        
        PID:2200
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        119⤵
        
        PID:1724
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        120⤵
        
        PID:1276
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        121⤵
        
        PID:1184
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        122⤵
        
        PID:4868
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        123⤵
        
        PID:1232
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        124⤵
        Checks computer location settings
        
        PID:4408
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        125⤵
        Checks computer location settings
        
        PID:4588
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        126⤵
        
        PID:3404
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        127⤵
        
        PID:904
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        128⤵
        
        PID:1164
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        129⤵
        
        PID:224
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        130⤵
        
        PID:1028
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        131⤵
        
        PID:616
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        131⤵
        
        PID:2140
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        132⤵
        Checks computer location settings
        
        PID:4176
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        133⤵
        
        PID:4620
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        134⤵
        
        PID:2536
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        135⤵
        
        PID:3912
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        136⤵
        
        PID:3348
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        137⤵
        Checks computer location settings
        
        PID:3732
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        138⤵
        
        PID:3112
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        139⤵
        
        PID:3968
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        139⤵
        
        PID:4144
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        140⤵
        
        PID:1856
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        141⤵
        
        PID:952
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        142⤵
        
        PID:2544
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        143⤵
        
        PID:2032
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        144⤵
        
        PID:5024
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        145⤵
        Checks computer location settings
        
        PID:1364
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        146⤵
        Checks computer location settings
        
        PID:2892
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        147⤵
        Checks computer location settings
        
        PID:4248
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        148⤵
        
        PID:1560
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        149⤵
        
        PID:2140
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        150⤵
        
        PID:4604
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        151⤵
        
        PID:4352
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        152⤵
        
        PID:3068
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        153⤵
        
        PID:2772
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        154⤵
        
        PID:4948
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        155⤵
        
        PID:1004
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        156⤵
        
        PID:5092
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        157⤵
        
        PID:4252
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        158⤵
        
        PID:1348
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        159⤵
        
        PID:4408
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        160⤵
        
        PID:4964
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        161⤵
        
        PID:2908
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        162⤵
        
        PID:2032
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        162⤵
        
        PID:4328
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        163⤵
        
        PID:4080
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        164⤵
        
        PID:3992
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        165⤵
        
        PID:3228
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        166⤵
        Checks computer location settings
        
        PID:4968
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        167⤵
        
        PID:2320
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        168⤵
        Checks computer location settings
        
        PID:5012
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        169⤵
        
        PID:4480
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        170⤵
        
        PID:768
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        171⤵
        
        PID:3524
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        172⤵
        
        PID:2772
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        173⤵
        
        PID:4948
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        174⤵
        
        PID:1004
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        175⤵
        
        PID:4000
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        176⤵
        Checks computer location settings
        
        PID:4872
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        177⤵
        
        PID:4776
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        178⤵
        
        PID:4408
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        179⤵
        Checks computer location settings
        
        PID:4964
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        180⤵
        
        PID:2544
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        180⤵
        
        PID:2908
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        181⤵
        
        PID:4328
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        182⤵
        Checks computer location settings
        
        PID:2360
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        183⤵
        
        PID:4080
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        183⤵
        Checks computer location settings
        
        PID:3272
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        184⤵
        
        PID:616
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        185⤵
        
        PID:2648
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        186⤵
        
        PID:3704
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        187⤵
        
        PID:4512
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        188⤵
        
        PID:4176
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        188⤵
        
        PID:2844
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        189⤵
        
        PID:2868
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        190⤵
        
        PID:2324
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        191⤵
        
        PID:1924
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        192⤵
        
        PID:2676
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        193⤵
        
        PID:4420
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        194⤵
        
        PID:2624
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        195⤵
        
        PID:4144
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        195⤵
        
        PID:1348
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        196⤵
        Checks computer location settings
        
        PID:4828
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        197⤵
        
        PID:952
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        198⤵
        
        PID:3404
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        199⤵
        
        PID:2832
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        200⤵
        
        PID:3940
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        201⤵
        
        PID:4328
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        201⤵
        
        PID:1812
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        202⤵
        
        PID:3272
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        203⤵
        Checks computer location settings
        
        PID:4088
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        204⤵
        
        PID:3228
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        204⤵
        Checks computer location settings
        
        PID:544
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        205⤵
        
        PID:3296
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        206⤵
        Checks computer location settings
        
        PID:2540
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        207⤵
        
        PID:5012
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        207⤵
        
        PID:4920
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        208⤵
        
        PID:2844
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        208⤵
        
        PID:4496
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        209⤵
        
        PID:768
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        209⤵
        
        PID:2860
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        210⤵
        
        PID:4332
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        211⤵
        
        PID:3516
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        212⤵
        
        PID:1232
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        213⤵
        
        PID:2624
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        214⤵
        
        PID:4036
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        215⤵
        
        PID:4872
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        215⤵
        
        PID:4272
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        216⤵
        Checks computer location settings
        
        PID:4916
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        217⤵
        
        PID:3404
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        218⤵
        
        PID:3996
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        219⤵
        
        PID:3508
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        220⤵
        
        PID:1752
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        221⤵
        
        PID:856
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        222⤵
        
        PID:2320
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        223⤵
        
        PID:4088
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        223⤵
        
        PID:1416
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        224⤵
        
        PID:544
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        224⤵
        Checks computer location settings
        
        PID:1360
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        225⤵
        
        PID:4352
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        226⤵
        
        PID:4124
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        227⤵
        Checks computer location settings
        
        PID:3772
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        228⤵
        
        PID:2688
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        229⤵
        Checks computer location settings
        
        PID:888
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        230⤵
        
        PID:2676
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        230⤵
        Checks computer location settings
        
        PID:3916
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        231⤵
        
        PID:1856
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        232⤵
        
        PID:3224
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        233⤵
        
        PID:5068
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        234⤵
        
        PID:1180
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        235⤵
        
        PID:3292
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        236⤵
        
        PID:4596
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        237⤵
        
        PID:4008
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        238⤵
        
        PID:2752
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        239⤵
        Checks computer location settings
        
        PID:4992
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        240⤵
        
        PID:2116
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        241⤵
        
        PID:1752
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        242⤵
        
        PID:932
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        243⤵
        Checks computer location settings
        
        PID:1028
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        244⤵
        
        PID:1512
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        245⤵
        
        PID:5064
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        246⤵
        
        PID:3296
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        246⤵
        
        PID:2540
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        247⤵
        
        PID:4040
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        248⤵
        
        PID:3772
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        249⤵
        Checks computer location settings
        
        PID:2688
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        250⤵
        
        PID:888
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        251⤵
        
        PID:2588
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        252⤵
        
        PID:4004
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        253⤵
        
        PID:1196
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        254⤵
        
        PID:4036
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        254⤵
        Checks computer location settings
        
        PID:5040
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        255⤵
        
        PID:952
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        255⤵
        Checks computer location settings
        
        PID:1596
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        256⤵
        
        PID:2908
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        257⤵
        Checks computer location settings
        
        PID:2832
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        258⤵
        
        PID:3940
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        259⤵
        
        PID:3304
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        260⤵
        
        PID:3880
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        261⤵
        
        PID:4968
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        262⤵
        
        PID:2960
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        263⤵
        
        PID:852
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        264⤵
        
        PID:4352
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        265⤵
        
        PID:1092
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        266⤵
        
        PID:1156
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        267⤵
        
        PID:1924
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        267⤵
        
        PID:2860
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        268⤵
        
        PID:2772
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        269⤵
        
        PID:1860
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        270⤵
        
        PID:1856
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        271⤵
        
        PID:2588
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        271⤵
        
        PID:2596
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        272⤵
        
        PID:1348
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        272⤵
        Checks computer location settings
        
        PID:4144
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        273⤵
        
        PID:4588
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        274⤵
        
        PID:5056
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        275⤵
        
        PID:2652
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        276⤵
        
        PID:2832
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        277⤵
        
        PID:3940
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        278⤵
        
        PID:1812
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        278⤵
        
        PID:3304
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        279⤵
        
        PID:3880
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        280⤵
        Checks computer location settings
        
        PID:4968
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        281⤵
        Checks computer location settings
        
        PID:216
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        282⤵
        Checks computer location settings
        
        PID:4480
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        283⤵
        
        PID:3468
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        284⤵
        
        PID:1092
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        285⤵
        
        PID:3432
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        286⤵
        
        PID:2860
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        287⤵
        
        PID:1940
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        288⤵
        
        PID:4140
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        289⤵
        
        PID:4828
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        290⤵
        
        PID:4708
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        291⤵
        
        PID:5068
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        291⤵
        Checks computer location settings
        
        PID:2904
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        292⤵
        
        PID:3380
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        293⤵
        
        PID:4916
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        293⤵
        
        PID:1324
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        294⤵
        
        PID:4660
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        295⤵
        
        PID:1364
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        296⤵
        
        PID:860
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        297⤵
        
        PID:3508
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        297⤵
        
        PID:5036
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        298⤵
        
        PID:4448
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        299⤵
        
        PID:3036
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        300⤵
        
        PID:1456
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        301⤵
        
        PID:3076
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        302⤵
        
        PID:1368
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        303⤵
        
        PID:852
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        304⤵
        
        PID:1908
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        305⤵
        
        PID:4352
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        305⤵
        
        PID:2984
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        306⤵
        
        PID:2016
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        307⤵
        
        PID:2860
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        308⤵
        
        PID:2688
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        309⤵
        
        PID:4140
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        310⤵
        
        PID:1096
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        311⤵
        
        PID:2712
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        312⤵
        
        PID:3172
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        313⤵
        
        PID:1152
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        314⤵
        
        PID:4588
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        315⤵
        
        PID:4316
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        316⤵
        
        PID:992
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        317⤵
        
        PID:4412
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        318⤵
        Checks computer location settings
        
        PID:860
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        319⤵
        
        PID:3544
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        320⤵
        
        PID:968
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        321⤵
        
        PID:4604
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        322⤵
        
        PID:2604
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        323⤵
        Checks computer location settings
        
        PID:3660
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        324⤵
        
        PID:3276
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        325⤵
        
        PID:1500
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        326⤵
        
        PID:3468
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        326⤵
        
        PID:1476
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        327⤵
        
        PID:1156
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        327⤵
        
        PID:1624
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        328⤵
        
        PID:408
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        329⤵
        
        PID:4508
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        330⤵
        
        PID:5108
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        331⤵
        
        PID:3212
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        332⤵
        Checks computer location settings
        
        PID:4180
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        333⤵
        
        PID:1860
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        333⤵
        
        PID:724
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        334⤵
        
        PID:1940
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        334⤵
        
        PID:3916
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        335⤵
        
        PID:4120
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        336⤵
        
        PID:1152
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        337⤵
        
        PID:5024
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        338⤵
        
        PID:2120
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        339⤵
        
        PID:800
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        340⤵
        
        PID:4400
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        341⤵
        
        PID:3940
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        341⤵
        
        PID:1600
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        342⤵
        
        PID:448
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        343⤵
        
        PID:1576
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        344⤵
        
        PID:4604
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        345⤵
        
        PID:1380
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        346⤵
        
        PID:208
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        347⤵
        
        PID:2540
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        348⤵
        
        PID:4264
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        349⤵
        
        PID:2264
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        350⤵
        
        PID:1476
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        350⤵
        
        PID:3288
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        351⤵
        
        PID:756
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        352⤵
        
        PID:2108
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        353⤵
        
        PID:4672
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        354⤵
        Checks computer location settings
        
        PID:3212
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        355⤵
        Checks computer location settings
        
        PID:2156
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        356⤵
        
        PID:8
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        357⤵
        
        PID:2904
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        358⤵
        
        PID:3916
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        358⤵
        
        PID:3808
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        359⤵
        
        PID:4144
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        359⤵
        
        PID:4408
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        360⤵
        
        PID:228
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        361⤵
        
        PID:3328
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        362⤵
        
        PID:3996
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        363⤵
        
        PID:1364
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        363⤵
        
        PID:4328
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        364⤵
        
        PID:1164
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        365⤵
        
        PID:3748
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        366⤵
        
        PID:2448
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        367⤵
        
        PID:4968
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        367⤵
        
        PID:4512
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        368⤵
        Checks computer location settings
        
        PID:4604
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        369⤵
        
        PID:4920
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        370⤵
        
        PID:4712
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        371⤵
        
        PID:3772
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        372⤵
        
        PID:3112
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        373⤵
        
        PID:4996
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        374⤵
        
        PID:4924
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        375⤵
        
        PID:2688
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        376⤵
        
        PID:3500
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        377⤵
        
        PID:232
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        378⤵
        
        PID:2204
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        379⤵
        
        PID:3172
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        379⤵
        
        PID:1348
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        380⤵
        
        PID:2904
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        380⤵
        
        PID:1572
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        381⤵
        
        PID:3560
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        382⤵
        Checks computer location settings
        
        PID:2544
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        383⤵
        
        PID:4456
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        384⤵
        
        PID:4324
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        385⤵
        
        PID:4048
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        386⤵
        Checks computer location settings
        
        PID:4896
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        387⤵
        
        PID:856
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        388⤵
        
        PID:4580
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        389⤵
        
        PID:3776
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        390⤵
        
        PID:3276
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        391⤵
        
        PID:3068
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        392⤵
        
        PID:4176
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        393⤵
        
        PID:1624
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        394⤵
        
        PID:520
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        395⤵
        
        PID:2800
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        396⤵
        
        PID:2676
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        397⤵
        
        PID:2688
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        397⤵
        
        PID:3504
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        398⤵
        
        PID:8
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        399⤵
        
        PID:5000
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        400⤵
        
        PID:4976
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        401⤵
        
        PID:1572
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        401⤵
        
        PID:992
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        402⤵
        
        PID:636
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        403⤵
        
        PID:4400
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        403⤵
        
        PID:3004
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        404⤵
        
        PID:2840
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        405⤵
        
        PID:448
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        405⤵
        
        PID:224
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        406⤵
        
        PID:1576
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        406⤵
        
        PID:4796
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        407⤵
        
        PID:856
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        407⤵
        
        PID:4580
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        408⤵
        
        PID:4064
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        409⤵
        
        PID:3276
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        410⤵
        
        PID:4920
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        410⤵
        
        PID:3340
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        411⤵
        
        PID:4712
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        411⤵
        
        PID:1908
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        412⤵
        
        PID:1028
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        413⤵
        
        PID:5092
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        414⤵
        
        PID:4672
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        415⤵
        
        PID:2108
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        415⤵
        
        PID:1180
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        416⤵
        
        PID:2160
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        417⤵
        
        PID:8
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        418⤵
        
        PID:1200
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        419⤵
        
        PID:228
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        420⤵
        
        PID:1600
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        421⤵
        
        PID:1548
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        422⤵
        
        PID:4324
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        422⤵
        
        PID:2172
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        423⤵
        
        PID:4248
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        424⤵
        
        PID:3748
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        424⤵
        
        PID:5012
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        425⤵
        
        PID:4580
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        426⤵
        
        PID:1368
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        426⤵
        
        PID:4708
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        427⤵
        
        PID:888
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        428⤵
        
        PID:2868
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        429⤵
        
        PID:4296
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        430⤵
        
        PID:1624
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        431⤵
        
        PID:2984
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        431⤵
        
        PID:3100
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        432⤵
        
        PID:4824
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        433⤵
        
        PID:1060
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        434⤵
        
        PID:4988
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        435⤵
        
        PID:2608
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        436⤵
        
        PID:3152
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        437⤵
        
        PID:3504
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        438⤵
        
        PID:412
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        439⤵
        
        PID:3328
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        440⤵
        
        PID:1932
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        441⤵
        
        PID:3004
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        442⤵
        
        PID:616
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        443⤵
        
        PID:1164
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        443⤵
        
        PID:4528
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        444⤵
        
        PID:4540
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        445⤵
        
        PID:1380
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        445⤵
        
        PID:3076
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        446⤵
        
        PID:4168
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        447⤵
        
        PID:3948
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        448⤵
        
        PID:3020
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        449⤵
        
        PID:1500
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        450⤵
        
        PID:4688
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        451⤵
        
        PID:2860
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        452⤵
        
        PID:4828
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        453⤵
        
        PID:408
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        453⤵
        
        PID:5108
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        454⤵
        
        PID:3172
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        455⤵
        
        PID:2588
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        456⤵
        
        PID:4360
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        457⤵
        
        PID:5024
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        457⤵
        
        PID:1948
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        458⤵
        
        PID:1388
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        459⤵
        
        PID:2488
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        460⤵
        
        PID:3196
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        461⤵
        
        PID:3996
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        462⤵
        
        PID:5104
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        463⤵
        
        PID:228
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        463⤵
        
        PID:4068
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        464⤵
        
        PID:616
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        465⤵
        
        PID:2172
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        466⤵
        
        PID:4896
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        467⤵
        
        PID:4968
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        468⤵
        
        PID:208
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        469⤵
        
        PID:1184
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        470⤵
        
        PID:4568
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        471⤵
        
        PID:3772
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        471⤵
        
        PID:4404
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        472⤵
        
        PID:3208
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        473⤵
        
        PID:4996
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        473⤵
        
        PID:4524
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        474⤵
        
        PID:1012
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        475⤵
        
        PID:4916
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        476⤵
        
        PID:4836
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        477⤵
        
        PID:3212
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        477⤵
        
        PID:624
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        478⤵
        
        PID:2676
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        479⤵
        
        PID:1948
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        480⤵
        
        PID:1388
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        481⤵
        
        PID:668
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        482⤵
        
        PID:436
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        483⤵
        
        PID:956
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        484⤵
        
        PID:4080
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        485⤵
        
        PID:4456
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        485⤵
        
        PID:936
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        486⤵
        
        PID:4228
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        487⤵
        
        PID:2448
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        488⤵
        
        PID:3268
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        489⤵
        
        PID:4064
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        490⤵
        
        PID:2844
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        491⤵
        
        PID:1848
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        492⤵
        
        PID:3068
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        493⤵
        
        PID:3288
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        494⤵
        
        PID:2624
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        495⤵
        
        PID:964
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        496⤵
        
        PID:400
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        497⤵
        
        PID:3292
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        498⤵
        
        PID:3500
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        499⤵
        
        PID:3220
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        500⤵
        
        PID:2156
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        501⤵
        
        PID:112
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        502⤵
        
        PID:4408
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        503⤵
        
        PID:2488
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        504⤵
        
        PID:3216
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        505⤵
        
        PID:2116
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        506⤵
        
        PID:5060
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        507⤵
        
        PID:4556
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        508⤵
        
        PID:2456
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        509⤵
        
        PID:3312
        
        C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        510⤵
        
        PID:3776
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        510⤵
        
        PID:4168
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        511⤵
        
        PID:2972
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        512⤵
        
        PID:4472
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        513⤵
        
        PID:4620
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        514⤵
        
        PID:4924
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        515⤵
        
        PID:4252
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        516⤵
        
        PID:2292
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        517⤵
        
        PID:2204
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        518⤵
        
        PID:3576
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        519⤵
        
        PID:2152
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        520⤵
        
        PID:5024
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        521⤵
        
        PID:2156
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        522⤵
        
        PID:112
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        523⤵
        
        PID:2432
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        524⤵
        
        PID:2892
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        525⤵
        
        PID:228
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        526⤵
        
        PID:264
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        527⤵
        
        PID:2124
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        528⤵
        
        PID:1380
        
        C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe
        
        "C:\Users\Admin\AppData\Local\Temp\script.media.aggregator\bin\u8runner.exe"
        529⤵
        
        PID:2448

C:\Windows\system32\backgroundTaskHost.exe
"C:\Windows\system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca
1⤵
PID:3212

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads