Malware Analysis Report

2024-12-07 21:35

Sample ID 240717-bbpl2a1fqc
Target 50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118
SHA256 a49d0e109a2f379dadffd496b4ecf6f957edaeaeff50c95c81c0c17f91ce18e8
Tags
xtremerat persistence rat spyware upx
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

a49d0e109a2f379dadffd496b4ecf6f957edaeaeff50c95c81c0c17f91ce18e8

Threat Level: Known bad

The file 50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118 was found to be: Known bad.

Malicious Activity Summary

xtremerat persistence rat spyware upx

Detect XtremeRAT payload

XtremeRAT

Boot or Logon Autostart Execution: Active Setup

UPX packed file

Loads dropped DLL

Checks computer location settings

Executes dropped EXE

Adds Run key to start application

Drops file in System32 directory

Suspicious use of SetThreadContext

Unsigned PE

Enumerates physical storage devices

Suspicious use of WriteProcessMemory

Suspicious use of SetWindowsHookEx

Modifies registry class

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-07-17 00:58

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-07-17 00:58

Reported

2024-07-17 01:00

Platform

win7-20240705-en

Max time kernel

124s

Max time network

120s

Command Line

"C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe"

Signatures

Detect XtremeRAT payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

XtremeRAT

persistence spyware rat xtremerat

Boot or Logon Autostart Execution: Active Setup

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe restart" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe restart" N/A N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe restart" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe restart" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe restart" N/A N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe restart" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe restart" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A
N/A N/A C:\Windows\SysWOW64\svchost.exe N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A

Suspicious use of SetThreadContext

Description Indicator Process Target
PID 2452 set thread context of 2408 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe
PID 2780 set thread context of 1648 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2484 set thread context of 1984 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 844 set thread context of 1208 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 1592 set thread context of 2136 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 1968 set thread context of 2512 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 1632 set thread context of 2612 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2344 set thread context of 2992 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 1528 set thread context of 1832 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 1508 set thread context of 2144 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 1600 set thread context of 2560 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 2856 set thread context of 2632 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 1692 set thread context of 1916 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 1656 set thread context of 2464 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2460 set thread context of 1132 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 1632 set thread context of 1088 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2092 set thread context of 1708 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 3036 set thread context of 2712 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 1872 set thread context of 1248 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2968 set thread context of 1072 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 1364 set thread context of 1076 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2156 set thread context of 2632 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 3080 set thread context of 3104 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 3128 set thread context of 3180 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 3236 set thread context of 3252 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 3324 set thread context of 3340 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 3408 set thread context of 3424 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 3508 set thread context of 3528 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 3556 set thread context of 3608 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 3940 set thread context of 3956 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 4016 set thread context of 4048 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 4080 set thread context of 3088 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2528 set thread context of 3216 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 3328 set thread context of 3388 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 3516 set thread context of 3500 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 3564 set thread context of 3660 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 3184 set thread context of 4040 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 3108 set thread context of 4064 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 3428 set thread context of 3936 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 3108 set thread context of 4004 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 4116 set thread context of 4140 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 4232 set thread context of 4252 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 4308 set thread context of 4324 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 4448 set thread context of 4468 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 4488 set thread context of 4516 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 4612 set thread context of 4636 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 4976 set thread context of 4992 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 5016 set thread context of 5040 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 3216 set thread context of 4120 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 3500 set thread context of 4336 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 4452 set thread context of 4444 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 4652 set thread context of 4020 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 5116 set thread context of 4004 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 4192 set thread context of 4312 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 4244 set thread context of 4832 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 5060 set thread context of 4148 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 5220 set thread context of 5244 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 5268 set thread context of 5300 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 5356 set thread context of 5396 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 5504 set thread context of 5520 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 5616 set thread context of 5636 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 5760 set thread context of 5780 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 5880 set thread context of 5908 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 5980 set thread context of 6000 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe

Enumerates physical storage devices

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2452 wrote to memory of 2408 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe
PID 2452 wrote to memory of 2408 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe
PID 2452 wrote to memory of 2408 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe
PID 2452 wrote to memory of 2408 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe
PID 2452 wrote to memory of 2408 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe
PID 2452 wrote to memory of 2408 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe
PID 2452 wrote to memory of 2408 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe
PID 2452 wrote to memory of 2408 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe
PID 2452 wrote to memory of 2408 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe
PID 2408 wrote to memory of 2420 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Windows\SysWOW64\svchost.exe
PID 2408 wrote to memory of 2420 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Windows\SysWOW64\svchost.exe
PID 2408 wrote to memory of 2420 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Windows\SysWOW64\svchost.exe
PID 2408 wrote to memory of 2420 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Windows\SysWOW64\svchost.exe
PID 2408 wrote to memory of 2420 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Windows\SysWOW64\svchost.exe
PID 2408 wrote to memory of 2984 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2984 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2984 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2984 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2984 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2332 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2332 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2332 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2332 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2332 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 1636 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 1636 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 1636 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 1636 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 1636 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2768 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2768 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2768 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2768 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2768 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2776 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2776 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2776 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2776 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2776 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2876 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2876 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2876 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2876 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2876 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2888 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2888 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2888 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2888 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2888 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2904 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2904 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2904 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2904 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files\Internet Explorer\iexplore.exe
PID 2408 wrote to memory of 2780 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2408 wrote to memory of 2780 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2408 wrote to memory of 2780 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2408 wrote to memory of 2780 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2780 wrote to memory of 1648 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2780 wrote to memory of 1648 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2780 wrote to memory of 1648 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2780 wrote to memory of 1648 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2780 wrote to memory of 1648 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2780 wrote to memory of 1648 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2780 wrote to memory of 1648 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe

Processes

C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe"

C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe"

C:\Windows\SysWOW64\svchost.exe

svchost.exe

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe"

Network

N/A

Files

memory/2408-2-0x0000000000C80000-0x0000000000C95000-memory.dmp

memory/2408-4-0x0000000000C80000-0x0000000000C95000-memory.dmp

memory/2408-5-0x0000000000C80000-0x0000000000C95000-memory.dmp

memory/2408-6-0x0000000000C80000-0x0000000000C95000-memory.dmp

memory/2420-14-0x0000000000C80000-0x0000000000C95000-memory.dmp

C:\Windows\SysWOW64\sdd\ssd.exe

MD5 50d0446e6511b1b03ea603b7ee3d9c28
SHA1 0a4aafc54d6f0fd72e54426babe8c75b393ae3ff
SHA256 a49d0e109a2f379dadffd496b4ecf6f957edaeaeff50c95c81c0c17f91ce18e8
SHA512 2ec159f81ee5e44229c29caa75185306d59c5e3717f99b849eb8c61479912b40748b815bd36f1e4fd96ca8c7c7b7c88dbcc8d2ec9464e2b0f6ea398eb32ec0b1

memory/2420-12-0x0000000000C80000-0x0000000000C95000-memory.dmp

memory/2408-21-0x0000000000C80000-0x0000000000C95000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SzxW01LVm.cfg

MD5 b353f60e994176d95c3c2b9ccab22cfe
SHA1 bbbb6434b9fef0cd903a03a3f31b54d92c38395c
SHA256 315f49a8b72f50263d5b91fdadfbe7213cf8c692606810dedb23598d2652fda7
SHA512 f86262fe2b945c60ec6b463e859749478bcfa366b36b35ef746bd75bf1cc700ac4170f584a55424883e960ce7dd5b9416eaa554a087f307f7ce5cdd3b8602e19

\??\PIPE\srvsvc

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Analysis: behavioral2

Detonation Overview

Submitted

2024-07-17 00:58

Reported

2024-07-17 01:01

Platform

win10v2004-20240709-en

Max time kernel

150s

Max time network

153s

Command Line

"C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe"

Signatures

Detect XtremeRAT payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

XtremeRAT

persistence spyware rat xtremerat

Boot or Logon Autostart Execution: Active Setup

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe restart" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe restart" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe restart" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe restart" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe restart" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe restart" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe restart" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe restart" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe restart" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" N/A N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V}\StubPath = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe restart" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{BFQ0IGW7-0L13-G20R-G7Y8-1CO4465VAA7V} C:\Windows\SysWOW64\sdd\ssd.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation N/A N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation N/A N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation N/A N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation N/A N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation N/A N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation N/A N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation N/A N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation N/A N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation N/A N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation N/A N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation N/A N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation N/A N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation N/A N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation N/A N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation N/A N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation N/A N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation N/A N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation N/A N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation N/A N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\Control Panel\International\Geo\Nation C:\Windows\SysWOW64\sdd\ssd.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\system32\\sdd\\ssd.exe" C:\Windows\SysWOW64\svchost.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-47134698-4092160662-1261813102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" C:\Windows\SysWOW64\sdd\ssd.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Users\\Admin\\AppData\\Roaming\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\SysWOW64\\sdd\\ssd.exe" N/A N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File opened for modification C:\Windows\SysWOW64\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe N/A
File created C:\Windows\SysWOW64\sdd\ssd.exe N/A N/A

Suspicious use of SetThreadContext

Description Indicator Process Target
PID 2224 set thread context of 1644 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe
PID 2196 set thread context of 2980 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 4372 set thread context of 4512 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 1004 set thread context of 3304 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 2056 set thread context of 3688 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2664 set thread context of 4884 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 4100 set thread context of 4520 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 3496 set thread context of 1364 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 3124 set thread context of 3476 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 3052 set thread context of 2024 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 4352 set thread context of 4280 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2036 set thread context of 3304 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 4776 set thread context of 4516 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 2548 set thread context of 1380 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 3456 set thread context of 2936 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2412 set thread context of 3052 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 4296 set thread context of 1460 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 2592 set thread context of 4172 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 4548 set thread context of 1604 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 4700 set thread context of 4516 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 4352 set thread context of 1248 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 5460 set thread context of 5500 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 5532 set thread context of 5556 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 5664 set thread context of 5696 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 5752 set thread context of 5796 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 5896 set thread context of 5920 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 5996 set thread context of 6020 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 5452 set thread context of 5496 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 4900 set thread context of 5544 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 5704 set thread context of 2296 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 5756 set thread context of 5944 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 6072 set thread context of 5964 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2696 set thread context of 5336 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 5972 set thread context of 5968 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 6036 set thread context of 6020 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 3976 set thread context of 5896 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 4676 set thread context of 6024 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 5880 set thread context of 5872 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 5300 set thread context of 5472 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 6312 set thread context of 6344 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 6404 set thread context of 6444 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 6536 set thread context of 6560 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 6688 set thread context of 6712 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 6824 set thread context of 6860 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 6880 set thread context of 6920 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 7068 set thread context of 7092 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 6020 set thread context of 6432 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 6568 set thread context of 6628 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 6644 set thread context of 6888 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 7112 set thread context of 7160 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 6512 set thread context of 6720 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 5916 set thread context of 6636 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 6932 set thread context of 6876 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 6556 set thread context of 6536 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 6564 set thread context of 2352 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 7204 set thread context of 7228 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 7424 set thread context of 7448 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 7576 set thread context of 7616 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 7568 set thread context of 7628 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 7820 set thread context of 7852 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 7976 set thread context of 8008 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 8060 set thread context of 8088 N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe C:\Users\Admin\AppData\Roaming\sdd\ssd.exe
PID 8188 set thread context of 7224 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 4012 set thread context of 6884 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe

Enumerates physical storage devices

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\svchost.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ N/A N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Windows\SysWOW64\sdd\ssd.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Users\Admin\AppData\Roaming\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A
N/A N/A C:\Windows\SysWOW64\sdd\ssd.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2224 wrote to memory of 1644 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe
PID 2224 wrote to memory of 1644 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe
PID 2224 wrote to memory of 1644 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe
PID 2224 wrote to memory of 1644 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe
PID 2224 wrote to memory of 1644 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe
PID 2224 wrote to memory of 1644 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe
PID 2224 wrote to memory of 1644 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe
PID 2224 wrote to memory of 1644 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe
PID 1644 wrote to memory of 3696 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Windows\SysWOW64\svchost.exe
PID 1644 wrote to memory of 3696 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Windows\SysWOW64\svchost.exe
PID 1644 wrote to memory of 3696 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Windows\SysWOW64\svchost.exe
PID 1644 wrote to memory of 3696 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Windows\SysWOW64\svchost.exe
PID 1644 wrote to memory of 3320 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 3320 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 3320 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 1184 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 1184 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 1184 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 3200 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 3200 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 3200 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 2728 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 2728 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 2728 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 2316 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 2316 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 2316 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 2340 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 2340 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 2340 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 3532 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 3532 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 3532 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 2508 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 2508 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 1644 wrote to memory of 2196 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 1644 wrote to memory of 2196 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 1644 wrote to memory of 2196 N/A C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2196 wrote to memory of 2980 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2196 wrote to memory of 2980 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2196 wrote to memory of 2980 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2196 wrote to memory of 2980 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2196 wrote to memory of 2980 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2196 wrote to memory of 2980 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2196 wrote to memory of 2980 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2196 wrote to memory of 2980 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Windows\SysWOW64\sdd\ssd.exe
PID 2980 wrote to memory of 1080 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2980 wrote to memory of 1080 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2980 wrote to memory of 1080 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2980 wrote to memory of 3416 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2980 wrote to memory of 3416 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2980 wrote to memory of 3416 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2980 wrote to memory of 1868 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2980 wrote to memory of 1868 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2980 wrote to memory of 1868 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2980 wrote to memory of 4428 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2980 wrote to memory of 4428 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2980 wrote to memory of 4428 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2980 wrote to memory of 736 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2980 wrote to memory of 736 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2980 wrote to memory of 736 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2980 wrote to memory of 1100 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2980 wrote to memory of 1100 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2980 wrote to memory of 1100 N/A C:\Windows\SysWOW64\sdd\ssd.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe"

C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe

"C:\Users\Admin\AppData\Local\Temp\50d0446e6511b1b03ea603b7ee3d9c28_JaffaCakes118.exe"

C:\Windows\SysWOW64\svchost.exe

svchost.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\system32\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Users\Admin\AppData\Roaming\sdd\ssd.exe

"C:\Users\Admin\AppData\Roaming\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

C:\Windows\SysWOW64\sdd\ssd.exe

"C:\Windows\SysWOW64\sdd\ssd.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 13.86.106.20.in-addr.arpa udp
US 8.8.8.8:53 22.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
US 8.8.8.8:53 183.142.211.20.in-addr.arpa udp
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 26.165.165.52.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 25.140.123.92.in-addr.arpa udp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 14.173.189.20.in-addr.arpa udp

Files

memory/1644-2-0x0000000000C80000-0x0000000000C95000-memory.dmp

memory/1644-4-0x0000000000C80000-0x0000000000C95000-memory.dmp

memory/1644-5-0x0000000000C80000-0x0000000000C95000-memory.dmp

memory/1644-6-0x0000000000C80000-0x0000000000C95000-memory.dmp

memory/3696-12-0x0000000000C80000-0x0000000000C95000-memory.dmp

C:\Windows\SysWOW64\sdd\ssd.exe

MD5 50d0446e6511b1b03ea603b7ee3d9c28
SHA1 0a4aafc54d6f0fd72e54426babe8c75b393ae3ff
SHA256 a49d0e109a2f379dadffd496b4ecf6f957edaeaeff50c95c81c0c17f91ce18e8
SHA512 2ec159f81ee5e44229c29caa75185306d59c5e3717f99b849eb8c61479912b40748b815bd36f1e4fd96ca8c7c7b7c88dbcc8d2ec9464e2b0f6ea398eb32ec0b1

memory/1644-15-0x0000000000C80000-0x0000000000C95000-memory.dmp

memory/2980-21-0x0000000000C80000-0x0000000000C95000-memory.dmp

memory/2980-22-0x0000000000C80000-0x0000000000C95000-memory.dmp

memory/2980-23-0x0000000000C80000-0x0000000000C95000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SzxW01LVm.cfg

MD5 b353f60e994176d95c3c2b9ccab22cfe
SHA1 bbbb6434b9fef0cd903a03a3f31b54d92c38395c
SHA256 315f49a8b72f50263d5b91fdadfbe7213cf8c692606810dedb23598d2652fda7
SHA512 f86262fe2b945c60ec6b463e859749478bcfa366b36b35ef746bd75bf1cc700ac4170f584a55424883e960ce7dd5b9416eaa554a087f307f7ce5cdd3b8602e19

memory/2980-94-0x0000000000C80000-0x0000000000C95000-memory.dmp

\??\PIPE\srvsvc

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e