cb7bc92eeb0b7161c624d8a48949621234e09bb9ed315d1397ce01b72d60e986

Analysis

max time kernel
7s
max time network
202s
platform
windows10-1703_x64
resource
win10-20240611-en
resource tags

arch:x64arch:x86image:win10-20240611-enlocale:en-usos:windows10-1703-x64system
submitted
06/08/2024, 08:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Melted.exe
Size 8.5MB
Sample240806-kcm92avarn
SHA256 cb7bc92eeb0b7161c624d8a48949621234e09bb9ed315d1397ce01b72d60e986
MD5 6c1806ea61dd1295dcf639173fc0096f
SHA1 771193751ce445cccb8db732622d5b0957c217cd
SHA512 a0db68dd755c9fbfd47414cc0cc3e89f1db21ef3b156946c48635d2372c47ebc6eb93302514fe25e211cf462317c6b6f294659de8ebbbf28da8c82eaa884fbb2
SSDEEP 98304:9o3A2vT/oZJXY6Gpdbw8a0sCsg8epJA3bFR/M47jn:9GT0J9stwFPnk47jn
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

aspackv2 discovery exploit persistence

Malware Config

Signatures

Modifies WinLogon for persistence 2 TTPs 2 IoCs

persistence

Winlogon Helper DLL

T1547.004

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit = "C:\\Windows\\system32\\userinit.exe,"	reg.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell = "explorer.exe"	reg.exe

Possible privilege escalation attempt 2 IoCs

exploit

pid	Process
4248	takeown.exe
3120	icacls.exe

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
behavioral2/files/0x000700000001aadf-61.dat	aspack_v212_v242

Executes dropped EXE 3 IoCs

pid	Process
2348	b.exe
228	fb.exe
4700	e.exe

Loads dropped DLL 3 IoCs

pid	Process
4700	e.exe
4700	e.exe
4700	e.exe

Modifies file permissions 1 TTPs 2 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
4248	takeown.exe
3120	icacls.exe

Drops desktop.ini file(s) 2 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\RecycleBin\desktop.ini	Melted.exe
File created	C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\RecycleBin\Recycle Bin\desktop.ini	Melted.exe

Enumerates connected drives 3 TTPs 1 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\E:	mountvol.exe

System Location Discovery: System Language Discovery 1 TTPs 16 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mountvol.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Melted.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	reg.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	reg.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	b.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	timeout.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	timeout.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mountvol.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mountvol.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	reg.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	reg.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	fb.exe

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
224	cmd.exe

Delays execution with timeout.exe 7 IoCs

evasion

pid	Process
4848	timeout.exe
400	timeout.exe
1748	timeout.exe
3828	timeout.exe
5660	timeout.exe
9548	timeout.exe
10308	timeout.exe

Enumerates system info in registry 2 TTPs 1 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe

Kills process with taskkill 64 IoCs

evasion

pid	Process
3908	taskkill.exe
9220	taskkill.exe
5728	taskkill.exe
10232	taskkill.exe
2424	taskkill.exe
3872	taskkill.exe
3868	taskkill.exe
4236	taskkill.exe
3752	taskkill.exe
8800	taskkill.exe
9816	taskkill.exe
7592	taskkill.exe
18116	taskkill.exe
4844	taskkill.exe
1900	taskkill.exe
3816	taskkill.exe
11704	taskkill.exe
11928	taskkill.exe
8296	taskkill.exe
13176	taskkill.exe
14440	taskkill.exe
4252	taskkill.exe
3592	taskkill.exe
12332	taskkill.exe
18900	taskkill.exe
13492	taskkill.exe
852	taskkill.exe
2312	taskkill.exe
11132	taskkill.exe
3372	taskkill.exe
1328	taskkill.exe
6920	taskkill.exe
4392	taskkill.exe
5740	taskkill.exe
15500	taskkill.exe
5076	taskkill.exe
4860	taskkill.exe
12096	taskkill.exe
16236	taskkill.exe
5736	taskkill.exe
1704	taskkill.exe
4080	taskkill.exe
4340	taskkill.exe
3468	taskkill.exe
4668	taskkill.exe
6100	taskkill.exe
7832	taskkill.exe
4324	taskkill.exe
4468	taskkill.exe
5788	taskkill.exe
11512	taskkill.exe
10912	taskkill.exe
9416	taskkill.exe
16572	taskkill.exe
7892	taskkill.exe
3672	taskkill.exe
7116	taskkill.exe
13736	taskkill.exe
2716	taskkill.exe
9852	taskkill.exe
14956	taskkill.exe
17872	taskkill.exe
13468	taskkill.exe
1868	taskkill.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1868	taskkill.exe

Suspicious use of WriteProcessMemory 47 IoCs

description	pid	Process	procid_target
PID 1576 wrote to memory of 5032	1576	Melted.exe	70
PID 1576 wrote to memory of 5032	1576	Melted.exe	70
PID 1576 wrote to memory of 5032	1576	Melted.exe	70
PID 5032 wrote to memory of 1868	5032	cmd.exe	72
PID 5032 wrote to memory of 1868	5032	cmd.exe	72
PID 5032 wrote to memory of 1868	5032	cmd.exe	72
PID 5032 wrote to memory of 2328	5032	cmd.exe	74
PID 5032 wrote to memory of 2328	5032	cmd.exe	74
PID 5032 wrote to memory of 2328	5032	cmd.exe	74
PID 5032 wrote to memory of 4800	5032	cmd.exe	75
PID 5032 wrote to memory of 4800	5032	cmd.exe	75
PID 5032 wrote to memory of 4800	5032	cmd.exe	75
PID 5032 wrote to memory of 192	5032	cmd.exe	76
PID 5032 wrote to memory of 192	5032	cmd.exe	76
PID 5032 wrote to memory of 192	5032	cmd.exe	76
PID 5032 wrote to memory of 692	5032	cmd.exe	77
PID 5032 wrote to memory of 692	5032	cmd.exe	77
PID 5032 wrote to memory of 692	5032	cmd.exe	77
PID 5032 wrote to memory of 4340	5032	cmd.exe	78
PID 5032 wrote to memory of 4340	5032	cmd.exe	78
PID 5032 wrote to memory of 4340	5032	cmd.exe	78
PID 5032 wrote to memory of 4404	5032	cmd.exe	79
PID 5032 wrote to memory of 4404	5032	cmd.exe	79
PID 5032 wrote to memory of 4404	5032	cmd.exe	79
PID 5032 wrote to memory of 4676	5032	cmd.exe	80
PID 5032 wrote to memory of 4676	5032	cmd.exe	80
PID 5032 wrote to memory of 4676	5032	cmd.exe	80
PID 5032 wrote to memory of 2348	5032	cmd.exe	81
PID 5032 wrote to memory of 2348	5032	cmd.exe	81
PID 5032 wrote to memory of 2348	5032	cmd.exe	81
PID 5032 wrote to memory of 4436	5032	cmd.exe	82
PID 5032 wrote to memory of 4436	5032	cmd.exe	82
PID 5032 wrote to memory of 4436	5032	cmd.exe	82
PID 5032 wrote to memory of 224	5032	cmd.exe	85
PID 5032 wrote to memory of 224	5032	cmd.exe	85
PID 5032 wrote to memory of 224	5032	cmd.exe	85
PID 5032 wrote to memory of 228	5032	cmd.exe	87
PID 5032 wrote to memory of 228	5032	cmd.exe	87
PID 5032 wrote to memory of 228	5032	cmd.exe	87
PID 5032 wrote to memory of 4848	5032	cmd.exe	89
PID 5032 wrote to memory of 4848	5032	cmd.exe	89
PID 5032 wrote to memory of 4848	5032	cmd.exe	89
PID 5032 wrote to memory of 4700	5032	cmd.exe	90
PID 5032 wrote to memory of 4700	5032	cmd.exe	90
PID 5032 wrote to memory of 400	5032	cmd.exe	179
PID 5032 wrote to memory of 400	5032	cmd.exe	179
PID 5032 wrote to memory of 400	5032	cmd.exe	179

C:\Users\Admin\AppData\Local\Temp\Melted.exe
"C:\Users\Admin\AppData\Local\Temp\Melted.exe"
1⤵
- Drops desktop.ini file(s)
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1576
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\main.bat" "
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:5032
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im smartscreen.exe
    3⤵
    - System Location Discovery: System Language Discovery
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:1868
- - C:\Windows\SysWOW64\mountvol.exe
    mountvol D:\ /d
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2328
- - C:\Windows\SysWOW64\mountvol.exe
    mountvol E:\ /d
    3⤵
    - Enumerates connected drives
    - System Location Discovery: System Language Discovery
    PID:4800
- - C:\Windows\SysWOW64\mountvol.exe
    mountvol F:\ /d
    3⤵
    - System Location Discovery: System Language Discovery
    PID:192
- - C:\Windows\SysWOW64\reg.exe
    reg import desktop.reg
    3⤵
    - System Location Discovery: System Language Discovery
    PID:692
- - C:\Windows\SysWOW64\reg.exe
    reg import fonts.reg
    3⤵
    - System Location Discovery: System Language Discovery
    PID:4340
- - C:\Windows\SysWOW64\reg.exe
    reg import logonui.reg
    3⤵
    - Modifies WinLogon for persistence
    - System Location Discovery: System Language Discovery
    PID:4404
- - C:\Windows\SysWOW64\reg.exe
    reg import winupdate.reg
    3⤵
    - System Location Discovery: System Language Discovery
    PID:4676
- - C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\b.exe
    b.exe
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    PID:2348
- - C:\Windows\SysWOW64\xcopy.exe
    xcopy C:\Windows\* C:\Users\Admin\Desktop\* /J /V /C /I /EXCLUDE:explorer.exe
    3⤵
    - System Location Discovery: System Language Discovery
    - Enumerates system info in registry
    PID:4436
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /K ping.cmd
    3⤵
    - System Location Discovery: System Language Discovery
    - System Network Configuration Discovery: Internet Connection Discovery
    PID:224
- - C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\fb.exe
    fb.exe
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    PID:228
- - C:\Windows\SysWOW64\timeout.exe
    timeout 1
    3⤵
    - System Location Discovery: System Language Discovery
    - Delays execution with timeout.exe
    PID:4848
- - C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\e.exe
    e.exe
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:4700
- - C:\Windows\SysWOW64\timeout.exe
    timeout 2
    3⤵
    - System Location Discovery: System Language Discovery
    - Delays execution with timeout.exe
    PID:400
- - C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\flash.exe
    flash.exe
    3⤵
    PID:3804
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im explorer.exe
    3⤵
    - Kills process with taskkill
    PID:3372
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /K copypastel.cmd
    3⤵
    PID:2284
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\9974" /is
      4⤵
      PID:4532
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      PID:2212
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\10605" /is
      4⤵
      PID:2948
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:4324
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\27670" /is
      4⤵
      PID:4520
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:4844
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\21134" /is
      4⤵
      PID:3544
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      PID:3952
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\25132" /is
      4⤵
      PID:3556
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      PID:3376
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\5609" /is
      4⤵
      PID:2696
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:1900
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\629" /is
      4⤵
      PID:3824
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:4252
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\21558" /is
      4⤵
      PID:680
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:1704
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\15875" /is
      4⤵
      PID:2904
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:1328
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\26320" /is
      4⤵
      PID:5072
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:4468
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\5547" /is
      4⤵
      PID:3280
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:2716
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\5818" /is
      4⤵
      PID:4280
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:4340
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\26910" /is
      4⤵
      PID:2336
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:3868
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\1248" /is
      4⤵
      PID:2224
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      PID:3252
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\16726" /is
      4⤵
      PID:4656
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:4236
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\26528" /is
      4⤵
      PID:4012
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:5076
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\6708" /is
      4⤵
      PID:3488
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:3592
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\16777" /is
      4⤵
      PID:3996
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:3468
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\28519" /is
      4⤵
      PID:2104
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:4668
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\30051" /is
      4⤵
      PID:4692
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      PID:3136
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\4239" /is
      4⤵
      PID:4780
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      PID:4332
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\23407" /is
      4⤵
      PID:3284
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:3816
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\162" /is
      4⤵
      PID:852
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:4860
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\15344" /is
      4⤵
      PID:4288
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:3908
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\25743" /is
      4⤵
      PID:1836
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:4080
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\21225" /is
      4⤵
      PID:3536
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:3752
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\17698" /is
      4⤵
      PID:3460
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:5728
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\16681" /is
      4⤵
      PID:5844
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:6920
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\10280" /is
      4⤵
      PID:7028
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:7892
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\3717" /is
      4⤵
      PID:8092
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      PID:8336
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\17619" /is
      4⤵
      PID:8484
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:8800
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\8549" /is
      4⤵
      PID:8960
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:10232
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\22368" /is
      4⤵
      PID:6668
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:7592
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\20354" /is
      4⤵
      PID:4804
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:2424
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\22518" /is
      4⤵
      PID:3872
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:5788
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\27629" /is
      4⤵
      PID:5624
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:3872
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\6354" /is
      4⤵
      PID:6052
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:11512
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\30292" /is
      4⤵
      PID:11608
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:11704
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\4001" /is
      4⤵
      PID:11868
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:12096
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\20353" /is
      4⤵
      PID:12240
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:7832
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\20013" /is
      4⤵
      PID:11656
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:11928
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\5923" /is
      4⤵
      PID:9816
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:8296
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\28220" /is
      4⤵
      PID:12260
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:10912
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\5841" /is
      4⤵
      PID:9884
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:13176
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\29877" /is
      4⤵
      PID:13308
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:5740
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\24140" /is
      4⤵
      PID:7072
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:13492
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\28677" /is
      4⤵
      PID:13660
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      PID:13972
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\29956" /is
      4⤵
      PID:14128
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:13736
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\21953" /is
      4⤵
      PID:14000
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:11132
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\17630" /is
      4⤵
      PID:5620
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:14440
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\25485" /is
      4⤵
      PID:14608
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:14956
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\8757" /is
      4⤵
      PID:15052
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:9416
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\1852" /is
      4⤵
      PID:12512
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      PID:11852
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\5407" /is
      4⤵
      PID:13372
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:16236
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\4665" /is
      4⤵
      PID:16344
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:5736
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\18417" /is
      4⤵
      PID:4532
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:16572
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\15397" /is
      4⤵
      PID:16748
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:12332
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\16133" /is
      4⤵
      PID:12848
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:17872
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\14529" /is
      4⤵
      PID:18012
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:18116
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\15802" /is
      4⤵
      PID:18280
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:13468
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\25871" /is
      4⤵
      PID:17896
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      PID:18192
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\31933" /is
      4⤵
      PID:3760
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      Kills process with taskkill
      PID:18900
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\20404" /is
      4⤵
      PID:19056
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /f /im taskmgr.exe
      4⤵
      PID:16924
  - - C:\Windows\SysWOW64\Robocopy.exe
      robocopy RecycleBin "C:\Users\Admin\Desktop\5511" /is
      4⤵
      PID:216
- - C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\i.exe
    i.exe
    3⤵
    PID:1764
- - C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\sk.exe
    sk.exe
    3⤵
    PID:3268
- - C:\Windows\SysWOW64\takeown.exe
    takeown C:\Windows\SystemResources\* Admin
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    PID:4248
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im e.exe
    3⤵
    PID:3284
- - C:\Windows\SysWOW64\timeout.exe
    timeout 2
    3⤵
    - Delays execution with timeout.exe
    PID:1748
- - C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\e.exe
    e.exe /min
    3⤵
    PID:4396
- - C:\Windows\SysWOW64\icacls.exe
    icacls C:\Windows\SystemResources\* /Grant:Admin
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    PID:3120
- - C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\g.exe
    g.exe
    3⤵
    PID:4620
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /K boohoo.cmd
    3⤵
    PID:4132
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:2036
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:336
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:236
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:8
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:3864
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5048
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:1448
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:2904
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:816
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:4928
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:1864
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:4328
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:2716
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:692
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:1636
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:3208
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:4448
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:1652
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:2192
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:400
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:3392
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:3472
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:3464
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:3572
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:3580
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:4168
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:4504
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:3356
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:1536
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:4232
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:2032
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:2936
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:4896
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:4524
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:2200
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:4084
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:4744
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:3952
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:4176
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:1384
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:2416
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:1940
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:1424
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:3680
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:3476
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:3468
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:1404
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:3516
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:3544
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:3556
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:4076
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:4204
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5148
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5164
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5196
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5252
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5276
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5300
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5352
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5384
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5400
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5444
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5504
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5528
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5580
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5632
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5708
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5780
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5824
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5872
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5896
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5936
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5952
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5996
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6028
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6064
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6128
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5564
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5600
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5612
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5748
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5868
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:1380
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5500
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:3460
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5248
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6204
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6224
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6256
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6304
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6336
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6380
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6424
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6460
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6484
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6524
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6556
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6592
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6632
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6656
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6716
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6732
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6796
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6836
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6852
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6900
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6976
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7008
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7056
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7092
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7136
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5576
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6240
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6252
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6628
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6724
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5844
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6940
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6944
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6700
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7188
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7228
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7252
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7296
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7328
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7352
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7396
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7432
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7472
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7484
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7536
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7568
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7620
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7644
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7684
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7704
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7728
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7772
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7808
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7860
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7924
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7996
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:8028
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:8100
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:8160
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7240
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7220
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7692
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7904
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7868
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:8148
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:904
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:4040
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:8216
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:8284
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:8364
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:8432
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:8492
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:8568
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:8588
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:8648
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:8696
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:8776
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:8860
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:8940
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:9016
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:9080
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:9108
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:9172
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:3560
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:8120
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:8388
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:8528
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:8508
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:3752
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:8804
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5540
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5808
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:8320
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5688
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:9228
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:9300
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:9480
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:9536
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:9628
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:9648
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:9700
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:9776
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:9840
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:9860
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:9920
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:9944
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10212
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:4644
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:4720
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:9376
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:4400
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:1736
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10144
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:3788
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7052
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:9636
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7364
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:9852
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:208
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5080
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:4196
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:3564
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:4872
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:4824
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10280
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:10356
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10448
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:10528
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10556
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:10584
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10644
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:10680
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10732
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:10796
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10832
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:10880
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10932
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:10972
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:11020
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11072
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:11208
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11252
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:3252
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:10008
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:9836
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5496
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:9440
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5040
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:4224
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7784
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:3452
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:2240
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5044
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:2912
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5184
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5308
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5424
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:10340
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10288
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5616
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:4860
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:10824
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:4728
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:8752
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5816
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11108
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6152
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:9268
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:4212
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6388
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6432
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6476
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10176
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:3768
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:9912
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6868
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6988
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7064
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7100
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6232
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6316
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6832
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:11280
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11316
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:11376
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11408
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:11440
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11480
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:11520
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11580
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:11636
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11676
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:11724
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11768
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:11816
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11836
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:11896
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11940
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:11972
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12012
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12056
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12076
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12148
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12180
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12204
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12280
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:11296
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7712
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7792
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11508
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:11536
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:708
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:11712
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11568
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:11716
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:2364
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:4604
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11936
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12008
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11872
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:8200
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12132
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:8440
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11476
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:1836
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7872
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10204
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11740
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:1028
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:9036
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7956
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12064
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5052
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:452
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12168
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:8596
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12228
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:9012
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10628
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7656
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:9644
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:8584
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:9856
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:4820
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:3916
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5292
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12316
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12344
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12388
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12424
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12456
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12484
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12532
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12556
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12616
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12640
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12680
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12720
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12760
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12792
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12836
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12872
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12928
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12964
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:13000
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:13036
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:13072
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:13096
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:13124
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:13204
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:13264
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:9976
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12544
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12628
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5812
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12596
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:8984
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:3964
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5944
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:13192
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12384
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5544
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:11700
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:10988
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:13344
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:13396
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:13416
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:13460
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:13504
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:13576
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:13636
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:13672
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:13740
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:13772
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:13800
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:13832
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:13904
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:13924
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:13992
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:14076
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:14136
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:14180
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:14204
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:14260
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:14284
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12004
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7592
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12216
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:13492
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:852
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10368
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:14072
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10616
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:10724
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10876
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:10844
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:14152
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11032
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:4300
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11220
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5744
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:14000
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:9368
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11204
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:3664
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:2264
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:14352
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:14380
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:14452
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:14528
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:14564
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:14628
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:14676
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:14708
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:14748
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:14800
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:14840
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:14872
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:14908
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:14988
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:15068
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:15096
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:15160
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:15184
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:15236
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:15280
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:15312
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:15336
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5620
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5836
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:5960
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:10892
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:6024
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12592
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12748
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:14984
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:15140
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:9824
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:15076
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:15328
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:13152
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12292
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:11268
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6060
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:3116
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6780
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:11684
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11784
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:9416
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:2140
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:9556
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:15388
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:15440
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:15480
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:15564
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:15596
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:15644
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:15672
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:15712
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:15768
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:15808
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:15832
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:15876
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:15912
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:15972
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:16012
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:16060
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:16092
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:16160
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:16200
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:16256
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:16316
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:16364
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12220
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:7660
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11560
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10440
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:7528
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:8176
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:15804
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:15904
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:15984
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12144
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11908
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12120
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11608
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10568
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:3164
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:8296
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5700
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10436
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:9248
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:14396
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5736
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12496
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12576
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:16408
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:16468
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:16508
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:16540
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:16604
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:16672
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:16712
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:16768
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:16800
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:16848
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:16880
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:16900
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:16968
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:16996
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:17044
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:17084
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:17116
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:17152
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:17184
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:17208
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:17256
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:17296
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:17340
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:17380
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:1312
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12632
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12768
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:16572
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12948
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:16876
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:16624
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:13224
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:17252
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:16956
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10228
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:6564
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:14952
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:15196
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:16392
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:11388
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:10044
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:15352
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:17452
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:17476
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:17532
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:17568
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:17604
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:17628
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:17684
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:17716
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:17764
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:17800
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:17828
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:17904
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:17956
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:17984
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:18068
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:18104
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:18212
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:18232
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:18308
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:18348
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:18388
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:18428
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:17464
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:17616
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:17816
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:5036
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:13848
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:18036
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:15800
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:14088
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:18116
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:16044
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:18180
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:12072
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:11720
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:17952
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:13916
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:2204
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:11216
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:10768
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:14032
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:2160
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:18436
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:18488
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:18512
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:18568
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:18604
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:18644
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:18676
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:18724
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:18752
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:18808
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:18832
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:18860
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:18916
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:19020
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:19080
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:19116
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:19136
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:19180
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:19204
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:19264
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:19292
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:19344
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:19368
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:19424
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:19444
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:18484
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:4664
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:18720
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:13788
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:18876
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:16452
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:19016
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:19072
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:16724
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:15252
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:14640
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:19272
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:10856
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12432
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:14488
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:12960
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:15060
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:19504
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:19548
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs"
      4⤵
      PID:19596
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs"
      4⤵
      PID:19636
- - C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\t.exe
    t.exe
    3⤵
    PID:3492
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im e.exe
    3⤵
    PID:3556
- - C:\Windows\SysWOW64\timeout.exe
    timeout 10
    3⤵
    - Delays execution with timeout.exe
    PID:3828
- - C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\sk2.exe
    sk2.exe
    3⤵
    PID:5588
- - C:\Windows\SysWOW64\timeout.exe
    timeout 2
    3⤵
    - Delays execution with timeout.exe
    PID:5660
- - C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\e.exe
    e.exe
    3⤵
    PID:6108
- - C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\sk3.exe
    sk3.exe
    3⤵
    PID:5244
- - C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\g_.exe
    g_.exe /min
    3⤵
    PID:5776
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im e.exe
    3⤵
    - Kills process with taskkill
    PID:6100
- - C:\Windows\explorer.exe
    C:\Windows\explorer.exe
    3⤵
    PID:9360
- - C:\Windows\SysWOW64\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\ending.vbs"
    3⤵
    PID:9524
- - C:\Windows\SysWOW64\timeout.exe
    timeout 5
    3⤵
    - Delays execution with timeout.exe
    PID:9548
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im g.exe
    3⤵
    - Kills process with taskkill
    PID:9220
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im sk2.exe
    3⤵
    - Kills process with taskkill
    PID:9852
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im sk.exe
    3⤵
    - Kills process with taskkill
    PID:3672
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im sk3.exe
    3⤵
    - Kills process with taskkill
    PID:7116
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im t.exe
    3⤵
    - Kills process with taskkill
    PID:9816
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im i.exe
    3⤵
    - Kills process with taskkill
    PID:4392
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im fb.exe
    3⤵
    - Kills process with taskkill
    PID:852
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im explorer.exe
    3⤵
    - Kills process with taskkill
    PID:2312
- - C:\Windows\SysWOW64\explorer.exe
    explorer.exe
    3⤵
    PID:10288
- - C:\Windows\SysWOW64\timeout.exe
    timeout 5
    3⤵
    - Delays execution with timeout.exe
    PID:10308
- - C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\g_.exe
    g_.exe
    3⤵
    PID:11100
- - C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\i.exe
    i.exe
    3⤵
    PID:11172
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im explorer.exe
    3⤵
    - Kills process with taskkill
    PID:15500

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x3dc
1⤵
PID:4384

C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
1⤵
PID:3720

C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{682159d9-c321-47ca-b3f1-30e36b2ec8b9} -Embedding
1⤵
PID:10408

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {9BA05972-F6A8-11CF-A442-00A0C90A8F39} -Embedding
1⤵
PID:10472

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {3eef301f-b596-4c0b-bd92-013beafce793} -Embedding
1⤵
PID:10712

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Winlogon Helper DLL

T1547.004

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Winlogon Helper DLL

T1547.004

Defense Evasion

File and Directory Permissions Modification

T1222

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

desktop.ini

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\RecycleBin\desktop.ini
Size 114B
SHA256 3ecbc30bfba5ba7ad0d335aefa251e4efcdc3c7d7919ac55600fd40147b91062
MD5 0b95bbe6e14257a6af62cf912ac723dc
SHA1 7995e2b5fb5c2c758161e04000bc8af4e1294374
SHA512 1c5ef8250d01d1b9ef41529071610a671f228996e0dec1efd6b1eeb1e5ca02fe684ed9857a9958e32b40470561f042709c7f43b8bae36379131737f39cfb7bd1
MD5 SHA1 SHA512

Submit Download

b.exe

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\b.exe
Size 9KB
SHA256 db842ba93967f1637597713b9a0a20c4c98d12bf0556413cba26a3f7379b03e0
MD5 404f9af788af52e74bf0f55edcd92b87
SHA1 17f4becaccaf6868bf5783caf7f88b1b6dc13a32
SHA512 e108ccbe0bf99478e1b6bd22bd208af8f90378e0e4db2aebe7d5b03dd5e8f679d2eb7e1649779753390a44a204f74a3a1a1f5572f3a77760f5bf62052b2da1ae
SSDEEP 192:eTUOjv8iHWJrDjOHJCCB37E5pz63JoZ5:eoev92JnjVCB37Sj
MD5 SHA1 SHA512 SSDEEP

Submit Download

boohoo.cmd

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\boohoo.cmd
Size 63B
SHA256 28ef22b5677f5523a8852966999f2e1decd7ccf21d14e65dea0d168d460b450c
MD5 d53097e0265a7589f56bfd43c2ab92d6
SHA1 c5cefc1eed9bd1eff1c32aca735af24135a1bd99
SHA512 9222dab4590a7d954b8852b3ac22d7bb30c6d4b563ba02003e95d30c16811048961ef757e5ad5ffe5a1c401509c16e99737215a5620702fb47fe217ea0f69445
MD5 SHA1 SHA512

Submit Download

causeErr1.vbs

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr1.vbs
Size 54B
SHA256 754bc078439d3b70d46b1a3482d1f359757dd5937d5f1874754f4c8128a6f0da
MD5 781df8e151e1d1bb97b691bc81a2619a
SHA1 cdd28747902e08da1656bb764d4d06f773c0eb2b
SHA512 b7368b8c44a826c769d8a79b4ed2c6eab82acbc965ea52c85f60bfdfe125a60285df5e35587700ba22829d26295d11a9b2d9f959ca974d3520274937a3383bd4
MD5 SHA1 SHA512

Submit Download

causeErr2.vbs

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\causeErr2.vbs
Size 25B
SHA256 18ff5d475bb345af4c5390ff5ab5cc0fae2dd1da9e00c7a2d169463c79d9a6ab
MD5 d86806b3929e8deb8ab3af50ff31983a
SHA1 f038800743d28f70962acda6281bbdc5a5f0fca4
SHA512 642d2c2a7c506e4bb8f61d4235fa5b0f411bd43e4cc0c4ab758a292c1fd684533ad1bf89a18b0013383f311095057670fe8ea3b9d0eb5f5a115492041e6d98a5
MD5 SHA1 SHA512

Submit Download

copypastel.cmd

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\copypastel.cmd
Size 160B
SHA256 8e0bcb5e46f121e9389c5312b4028b7a951e3d695365dc45884a5b756405b61f
MD5 22276a82790d962885ed81f4afaa12e3
SHA1 fbd254c68e04eae009e4bdf718332d01c18087c7
SHA512 c089f5388b18753200c7c83a63b7507a5ed608e6e3a8334fe4b92c7d86c20c14adfef950c43c52c1b570a3fe5a8b0583856511543ef1a863bdf0fcafa02222b0
MD5 SHA1 SHA512

Submit Download

desktop.reg

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\desktop.reg
Size 668B
SHA256 d0f2a2e83bdd0df4820733f8a0708ad647fc1febd3c4eb6936f6e0290fe0be0a
MD5 6bc57fa8fb4a2814c99ea72bc6c4c2b1
SHA1 c881f1a7965846d3e554ff1709553d2c8ed14043
SHA512 dd12e946a0a6f84c49306647453898500017c730af4bb47d51ab39343a275f7d5f117326adc2bd25c98231cbdf3097109fd286da756201e60206fffac6331a70
MD5 SHA1 SHA512

Submit Download

e.exe

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\e.exe
Size 61KB
SHA256 b78b116d79d8f9613510dbde5aa4a8ca59913ee32df540d06defa214489972d2
MD5 c085484b593c7089907af551de309a05
SHA1 f503ae9f559fd76073578686d2193a6956747fea
SHA512 72b458179362a1bb2888213736e5731d0bafe094feaac11a44e78f7a5ed60a4d6f275aa32bbce41950852a31bc55ce19266f26cd3e66bec9f35dc5aafe97fba1
SSDEEP 384:U2i88a1rx6tQ6el5eT10VvyCxdnQdICOtqBT5PzHfWPQfBVgAbxxl9A8EnO:U29L1ntiKyCdevbfW+B+sVA8
MD5 SHA1 SHA512 SSDEEP

Submit Download

ending.vbs

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\ending.vbs
Size 90B
SHA256 88d3fb6210f75a39337920ecbccfd0af4e4a5b9e7bf4a3bcd5366346bf7e66b6
MD5 774cada5baf571a414c25e2ae8931762
SHA1 6ae662e045bff78ec42cc58329288c7578e860d6
SHA512 183e44ac3c9be05e49bd6ddc58a4cc2a5d8517fccc8a1c2615b4b91c288beb410dea03ab79b2dc40a71036955e39afb47431900610905c3d2bb07eb1261c8845
MD5 SHA1 SHA512

Submit Download

fb.exe

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\fb.exe
Size 9KB
SHA256 c62d2a4ac688ed3972dbb663d2d54c996895d9a3efc4eacc21eb9e2cf02e7cb9
MD5 fa7cd30068f56e079841e36d16bce5c4
SHA1 49237ab087b28847eb1a01eb699ee99093df6afa
SHA512 a10534f16a2f0b6d0ace630d7b391a37c7fd7d6dd9e98245d5ec6aaf83935046732cadfc21133e0f2b484c1ca0959e16ce8e6f70e15278fd4d39a4950f03611f
SSDEEP 192:UTUOjv8iHWJrDjOYJCCB37E5pz63JoZ5:Uoev92JnjSCB37Sj
MD5 SHA1 SHA512 SSDEEP

Submit Download

flash.exe

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\flash.exe
Size 246KB
SHA256 30676ad5dc94c3fec3d77d87439b2bf0a1aaa7f01900b68002a06f11caee9ce6
MD5 9254ca1da9ff8ad492ca5fa06ca181c6
SHA1 70fa62e6232eae52467d29cf1c1dacb8a7aeab90
SHA512 a84fbbdea4e743f3e41878b9cf6db219778f1479aa478100718af9fc8d7620fc7a3295507e11df39c7863cb896f946514e50368db480796b6603c8de5580685a
SSDEEP 6144:/85Z+Y97t0Kc0Nd5bHzvvj/R87Z3BxonZ:/8vd2KxNPjs3gZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

fonts.reg

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\fonts.reg
Size 17KB
SHA256 0455aaa368bd1fcf95c519425f876706144d2822b91730c9255989c80ef34b5a
MD5 37c8a133cc59f9cf21424fa3be153ee4
SHA1 1c7bab80249f7c9b3cc2932fe27f0c1cd32f29d2
SHA512 ceffa6c04357a3175dca6f08e69d7ccd2fa4da48a8e9a01907df2a0a0bc5d8caba0042fb1f55436ecf41839601c8a44b1ec6037575e707d8ea2d6356fc6d6d4f
SSDEEP 192:g6QXF9n1K2WDcEVUBd7EVjjNj/1RKsi/8LkF:3QXF9n1K2WDckUqusi/8LM
MD5 SHA1 SHA512 SSDEEP

Submit Download

g.exe

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\g.exe
Size 60KB
SHA256 35fc36cdd77b1eae66fd02fec2f47cf06841365f6ab66160ed8cf522d71355f7
MD5 ea64d01d756080b86e8e5af63ed6eb50
SHA1 008634fbd4cd348165dbe540ea529f27bd39e5c0
SHA512 7e7046017eb32e804fb213070997ef228a12426e0f157e959a97a4e27f816eb66b365850cc18ae8573519623db354740d7c008c09734f404d31775e79ead2bb0
SSDEEP 384:C0LNueuReTvVtygq3gWyY8PI+uSH/7VlTHTFFLVsZsYPliDsQfBXS993PVi5N:9uQzyZgxGGz7T/xCjIDlBM93PV
MD5 SHA1 SHA512 SSDEEP

Submit Download

g_.exe

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\g_.exe
Size 69KB
SHA256 be9d8772b360ca8054929e5f057413b69932ca8e521e6c696e0fb6b371e8cb97
MD5 3cb72c753dd5e198792d1e0be81f7e2b
SHA1 8a55b72a998bf8362a12f68ee8c4801a5a24754c
SHA512 008ed2e26fb4f41e9bb245130cc8f285744ccf737adeffc4c78cb11c03261f906cfd50b5b9e78f2c17dc2b8a01d83554e93f4960370064af87e84322cc78ee70
SSDEEP 768:y5i/8zspE6x+xaHyTCPLapOzknBzrmfwuAf9:z/k6kxaO6LaaknB2wu
MD5 SHA1 SHA512 SSDEEP

Submit Download

i.exe

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\i.exe
Size 12KB
SHA256 2be7a0865ded1c0bd1f92d5e09bb7b37a9e36a40487a687e0359c93878611a78
MD5 cea5426da515d43c88132a133f83ce68
SHA1 0c224d0bb777f1e3b186fdf58cc82860d96805cc
SHA512 4c1f25147222c84dff513bebf00e828719454ad634ef9380cfc7835f0457a718b4b437ecb60c1fa72a7f83fbb67e1ddfcd225194eedda77034c72f8c752c642c
SSDEEP 192:c+UK9EEsNsspgJ45HeDUQUTb8XA55tfVDA4O:c+L9MNsAgJw4xUEXAc
MD5 SHA1 SHA512 SSDEEP

Submit Download

logonui.reg

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\logonui.reg
Size 33KB
SHA256 b7ade17dd54a4491fe8df34152323245b81288709c42519ce91a2d2c7a761bb8
MD5 b231e874f320daa87923d4aa38040d06
SHA1 498817057bc92251d721d4b44afca99fbe103696
SHA512 08e0fc3a35b6bbaab079ad7170b5f5d64ef88d5b4af681747d99547bc884fafdfbb54c238e0a6d9c89c1403f9f75d2f66b36acc6a9ab8742ec7b7b2d2060b4f8
SSDEEP 384:2bZfTlvtTDSYsTk/ZV5OZt5+FomSmgZV5HA3ugZt5+5j3mZTTwmIPnt53wQmDrZs:6rCATnk
MD5 SHA1 SHA512 SSDEEP

Submit Download

main.bat

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\main.bat
Size 1KB
SHA256 74e942b534f60a3d3673de6030fa46002bf0ec142b9575cafd8cc771f3e1a28c
MD5 825eb7b95953eb1c3a2e967453c082b8
SHA1 96813f5583e8bb6b0926fd2ccf50d351472f09d5
SHA512 1d50d1c3cc293715649d7d6a2ea5e7028f07b9e0c3e7523186cf3194a7fa68ce7b08046c2bb79468b039f24b813166cbc3d9b64a759ca08f18f06c95de7d657e
MD5 SHA1 SHA512

Submit Download

ping.cmd

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\ping.cmd
Size 126B
SHA256 fe38147b0ea25ace8e7397075fb827ba0f9e7d17e207800ea3e5f875913aaa9d
MD5 6af387fe39e874c82157ca8aba697458
SHA1 ea9487f8f1c3d19be955a78a909911aac566ef2b
SHA512 7b03f3cf898b359c9c4ac5ad86949732627257ce39326332d8702fa99072d2c620d6d82f5d9f81e29adb9cb252d24904839dc470c5c764cfacfdf963e7121799
MD5 SHA1 SHA512

Submit Download

sk.exe

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\sk.exe
Size 9KB
SHA256 00e030cb6b6f2fb7b3636f500f60492765363a661e4d7317278c0bbed5689441
MD5 cea26a633f1f3fd621382dad166466d8
SHA1 82d4d90bb6782b0c72deec431a3377e30d34c3e8
SHA512 5244a41121002f8e6c7082d0e4114d74a4fe527b9585adc751bf8d590860057eaf9129bd1dfc070c630f19ef4eac1fb4bcfc25675608fb007b3699c963b0176a
SSDEEP 192:/WlUjnkU1WJrDjOntWCj2B37E5pz63JoZ5IYZ:+lQnjgJnjg3j2B37Sjt
MD5 SHA1 SHA512 SSDEEP

Submit Download

sk2.exe

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\sk2.exe
Size 9KB
SHA256 e7dd38f8d0126e13b8d86659f62bda9aa9b50ac6451b1d5c4dab445385757b89
MD5 4fa84323d9988c8ce77d9f3eee327808
SHA1 5b475529847b707791b18e621337bee880ee9dc6
SHA512 4154063d92c06c7789359f416a6754c8edbbd08e58633c487a5826c614411a40038d01c65b94b49189d8a4689e25f0b0595a9be662e953bd8fec434a6f02d2f5
SSDEEP 192:f6SjHEY9WJrDjOoUWCSB37E5pz63JoZ5Us:S6HHoJnjMSB37SjU
MD5 SHA1 SHA512 SSDEEP

Submit Download

sk3.exe

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\sk3.exe
Size 9KB
SHA256 57509b4f3ec7b6aa07c4a42ad140d6d1a754a267d53b6fc539fa73c24da792c3
MD5 4dd87b1eb9e6ab5cadafa876917f34aa
SHA1 e46c529797a14acd0dc135ccf0b0144acc53e53b
SHA512 55cc6467b1786d08c12a41db5d205774a489b4522965932a126d1bf1a628f72129a843c380272f01bfe68e861ed829dffa537bd4527d0fdbe2ff8c9188ca9515
SSDEEP 192:sbimQb3ujfZGy2QWJrjjOt/lSFlB37E5pz63JoZgu:gQb3+fZD25JHjTB37SOu
MD5 SHA1 SHA512 SSDEEP

Submit Download

t.exe

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\t.exe
Size 62KB
SHA256 269c6da90935306778f4f76005d1f00b49703f8819b60e2764cc14a5abc9a781
MD5 9e0c60453cdea093fa4c6762f9b1fda9
SHA1 02dfa74e42739c4e8a9a0534273f6a89b51f1dd3
SHA512 fc499cb6b98529c7a856c9ec7198f2a6d00d0c0d6b16e826913ab8dca2602f6700e3956749d3316484b94e6867f54cf99aa77f23375ea6c5ea75daa88c91aa96
SSDEEP 384:qVaZdaVrV1uraitTP42GU+mHAeTPJ/yLFF192ILYEByeP3HqbpTPQfBV3AfSNA8n:qVDVrXuWitR5ypFhtyCXqdT+BnNA8
MD5 SHA1 SHA512 SSDEEP

Submit Download

ucrtbased.dll

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\ucrtbased.dll
Size 1.7MB
SHA256 eee42eabc546e5aa760f8df7105fcf505abffcb9ec4bf54398436303e407a3f8
MD5 c3130cfb00549a5a92da60e7f79f5fc9
SHA1 56c2e8fb1af609525b0f732bb67b806bddab3752
SHA512 29bab5b441484bdfac9ec21cd4f0f7454af05bfd7d77f7d4662aeaeaa0d3e25439d52aa341958e7896701546b4a607d3c7a32715386c78b746dfae8529a70748
SSDEEP 24576:JUV0C8E3W4JoceLErS6P0qoc6uoPrT5PgVBHmaw+zrGOzli7Gi0m9ZRXyYk:i8/B90ozghlGJ7js
MD5 SHA1 SHA512 SSDEEP

Submit Download

winupdate.reg

Path C:\Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\winupdate.reg
Size 40KB
SHA256 6ac6ec6b68cdb64086e404df7c109d2dceb8af21965141fb45f428e83ff192f1
MD5 9bad97ae7f640e56717304a068504ef6
SHA1 2fd3fffeee98b90597cb650298732391739ed374
SHA512 4ba567e480dc2bca1cf682f212e6ff1fe75a1f108ce72d70aca6f25ed4d5b4a76c928920862d2c4572b11916abaa83886c18e4f1df1e6556890cdaa84c11a478
SSDEEP 192:O/IbSJNWBMcta0N8cRh3MV95l3MYVM8qtO/wvHqT6QEgrgYrgnXTQnCXQMtfQbCC:GIbSzWPNgCWDKLZBrgsG76RHqma6+l
MD5 SHA1 SHA512 SSDEEP

Submit Download

mspaint.exe

Path C:\Users\Admin\Desktop\mspaint.exe
Size 6.2MB
SHA256 dee04fa8fb3d3dcb7320c0548bbbe8c5529f1357694e77250d17e53989faefa0
MD5 88ba36bb650ba85faffb70565de79c99
SHA1 59893b9fa90ea9d09d212c921d435e5a6972bd68
SHA512 13fddb4105b012a6f95a36667cea5a0a12d773ac384642ebc8ca4e4b7cc00b4740413ea8edfd1fbc7ab618e96469f659fa14b9cf30e7b601672b961010a66f44
SSDEEP 98304:llNVaG6X2u7InCEE+wysPM4mlaw0LI60GBGrGrGWAu67jPbQzXW:HNVZ6X6nTE+wBMHlaw0/67jPbYG
MD5 SHA1 SHA512 SSDEEP

Submit Download

notepad.exe

Path C:\Users\Admin\Desktop\notepad.exe
Size 230KB
SHA256 a1e2dffdbd83c5086753a81437b03439d213661fc7818b9ceb5327110a794023
MD5 fa9f7bb1f8a598722aecd2a2d9df20ef
SHA1 ca7589c55e31869108c744e1002f8a402a2bbaa6
SHA512 a86a3b98b5b73a68440a134d617d6d313dcf7cd4fb59a7724deabc7222c1a72c7f974ee3d5b8127310fa5b35f9a0615b89e6f3d61d6bb79713d5c84cc9063ea7
SSDEEP 6144:Z6dporo4rM6Ld9f71NYt5gfzDVlVXgOd:KZILd9fQt5GpX
MD5 SHA1 SHA512 SSDEEP

Submit Download

wscript.exe

Path C:\Users\Admin\Desktop\wscript.exe
Size 143KB
SHA256 e48e84547698932d978d1e9d097843a2261c5a27d651fe970658a86a058e26f1
MD5 0e4c497ee4fd246cefe7b0c4fe965ef6
SHA1 7fd5a5d1a8e673fac52c74c475aa71bd73b4bed2
SHA512 c5b97df16b3b6b28de16f1a53505fa1bc0377e1664b025b78cc37a2907b364c57b47213a443ef537b1541f9bb2a642b5d8a0be6641f186cfecebe4cb82626360
SSDEEP 3072:IuGzjMw6v3/yQ1SD9q+vXXKr1aYLGXruGTxt+M:4z4wGUXaYzXrtT
MD5 SHA1 SHA512 SSDEEP

Submit Download

vcruntime140d.dll

Path \Users\Admin\AppData\Local\Temp\Melted_01c2a4b8-50c7-4001-9c2b-b39cb8860eb3\vcruntime140d.dll
Size 130KB
SHA256 03eafdf65d672994e592b8acc8a1276ccae1218a5cb9685b9aa6a5ffe1a855fe
MD5 ee7fbf8768a87ea64ad4890540ce48f9
SHA1 bcbc1ebd5a592c2df216d3211f309a79f9cd8a9b
SHA512 0cbf346d46b5c0b09c1f3fb4837c8df662bf0c69de8c4ae292b994ec156c91b78dbaad733226d765b1ca3ee1695566dc90bf85086e438fa15b9eb32058abce80
SSDEEP 3072:bg6runAEs8KOSVZK/pXKsGmVecbQyt5mnaZa:bVisVZK/zBVecbQYla
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/1576-0-0x00007FFB9F7D0000-0x00007FFB9F9AB000-memory.dmp

Download

memory/1576-1-0x0000000000520000-0x00000000005AC000-memory.dmp

Download

memory/1576-3-0x0000000005370000-0x000000000586E000-memory.dmp

Download

memory/1576-2-0x0000000000F60000-0x0000000000F84000-memory.dmp

Download

memory/3492-141-0x00007FF7C4CE0000-0x00007FF7C4D07000-memory.dmp

Download

memory/3804-140-0x0000000000400000-0x00000000004A4000-memory.dmp

Download

memory/3804-178-0x0000000000400000-0x00000000004A4000-memory.dmp

Download

memory/4396-89-0x00007FF65F1C0000-0x00007FF65F1E6000-memory.dmp

Download

memory/4620-95-0x00007FF6AA250000-0x00007FF6AA276000-memory.dmp

Download

memory/4700-55-0x00007FF65F1C0000-0x00007FF65F1E6000-memory.dmp

Download

memory/4700-70-0x00007FF65F1C0000-0x00007FF65F1E6000-memory.dmp

Download

memory/5776-184-0x00007FF7426C0000-0x00007FF7426E9000-memory.dmp

Download

memory/5776-250-0x00007FF7426C0000-0x00007FF7426E9000-memory.dmp

Download

memory/6108-164-0x00007FF65F1C0000-0x00007FF65F1E6000-memory.dmp

Download

memory/11100-211-0x00007FF7426C0000-0x00007FF7426E9000-memory.dmp

Download

memory/11100-264-0x00007FF7426C0000-0x00007FF7426E9000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads