remcos | 3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d

Analysis

max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
23/08/2024, 05:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
Size

3.5MB
MD5

2e5655f2cfebe6357e6388e678f3c073
SHA1

f1d6b68d73a8da906368837c1cde74a26a900858
SHA256

3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d
SHA512

13477f0bc9a73809e7b069dc441c7fb0023178811f4fe3f39ccbc4b4c412516b612439d8025b0c79c33201c791b343cdcf7dec4a3fe7eabcd3e28b1cf520747f
SSDEEP

98304:cUROmKjJqajychmAfNKcA+hv5r61JD4XEdGic/7FW:TsqzcEAfhrr0D4UdGb/hW

Score

10^/10

remcos remotehost discovery evasion persistence rat themida trojan

Malware Config

Extracted

Family

remcos

Botnet

RemoteHost

192.3.101.172:9674

Attributes

audio_folder
MicRecords
audio_record_time
5
connect_delay
0
connect_interval
1
copy_file
remcos.exe
copy_folder
Remcos
delete_file
false
hide_file
false
hide_keylog_file
false
install_flag
false
keylog_crypt
false
keylog_file
logs.dat
keylog_flag
false
keylog_folder
Log
keylog_path
%Temp%
mouse_option
false
mutex
Rmc-54ZTI0
screenshot_crypt
false
screenshot_flag
false
screenshot_folder
Screenshots
screenshot_path
%AppData%
screenshot_time
10
take_screenshot_option
false
take_screenshot_time
5

Signatures

Remcos
Remcos is a closed-source remote control and surveillance software.
rat remcos

Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs

evasion

Query Registry

T1012

Virtualization/Sandbox Evasion

T1497

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe

Checks BIOS information in registry 2 TTPs 2 IoCs

BIOS information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe

Loads dropped DLL 1 IoCs

pid	Process
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe

Themida packer 3 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
behavioral2/memory/3776-24-0x0000000000420000-0x0000000000D82000-memory.dmp	themida
behavioral2/memory/3776-25-0x0000000000420000-0x0000000000D82000-memory.dmp	themida
behavioral2/memory/2232-32-0x0000000000420000-0x0000000000D82000-memory.dmp	themida

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-661032028-162657920-1226909816-1000\Software\Microsoft\Windows\CurrentVersion\Run\MyApp = "C:\\Users\\Admin\\AppData\\Local\\Temp\\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe"	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe

Suspicious behavior: MapViewOfSection 64 IoCs

pid	Process
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3776 wrote to memory of 2232	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	82
PID 3776 wrote to memory of 2232	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	82
PID 3776 wrote to memory of 2232	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	82
PID 3776 wrote to memory of 1628	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	83
PID 3776 wrote to memory of 1628	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	83
PID 3776 wrote to memory of 1628	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	83
PID 3776 wrote to memory of 3624	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	84
PID 3776 wrote to memory of 3624	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	84
PID 3776 wrote to memory of 3624	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	84
PID 3776 wrote to memory of 1272	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	85
PID 3776 wrote to memory of 1272	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	85
PID 3776 wrote to memory of 1272	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	85
PID 3776 wrote to memory of 2356	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	86
PID 3776 wrote to memory of 2356	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	86
PID 3776 wrote to memory of 2356	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	86
PID 3776 wrote to memory of 2184	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	87
PID 3776 wrote to memory of 2184	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	87
PID 3776 wrote to memory of 2184	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	87
PID 3776 wrote to memory of 3620	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	88
PID 3776 wrote to memory of 3620	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	88
PID 3776 wrote to memory of 3620	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	88
PID 3776 wrote to memory of 2568	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	89
PID 3776 wrote to memory of 2568	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	89
PID 3776 wrote to memory of 2568	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	89
PID 3776 wrote to memory of 2440	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	90
PID 3776 wrote to memory of 2440	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	90
PID 3776 wrote to memory of 2440	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	90
PID 3776 wrote to memory of 4588	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	91
PID 3776 wrote to memory of 4588	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	91
PID 3776 wrote to memory of 4588	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	91
PID 3776 wrote to memory of 3024	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	92
PID 3776 wrote to memory of 3024	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	92
PID 3776 wrote to memory of 3024	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	92
PID 3776 wrote to memory of 2168	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	93
PID 3776 wrote to memory of 2168	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	93
PID 3776 wrote to memory of 2168	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	93
PID 3776 wrote to memory of 1180	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	94
PID 3776 wrote to memory of 1180	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	94
PID 3776 wrote to memory of 1180	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	94
PID 3776 wrote to memory of 2436	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	95
PID 3776 wrote to memory of 2436	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	95
PID 3776 wrote to memory of 2436	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	95
PID 3776 wrote to memory of 4016	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	96
PID 3776 wrote to memory of 4016	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	96
PID 3776 wrote to memory of 4016	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	96
PID 3776 wrote to memory of 4872	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	97
PID 3776 wrote to memory of 4872	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	97
PID 3776 wrote to memory of 4872	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	97
PID 3776 wrote to memory of 3492	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	98
PID 3776 wrote to memory of 3492	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	98
PID 3776 wrote to memory of 3492	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	98
PID 3776 wrote to memory of 4064	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	99
PID 3776 wrote to memory of 4064	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	99
PID 3776 wrote to memory of 4064	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	99
PID 3776 wrote to memory of 4580	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	100
PID 3776 wrote to memory of 4580	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	100
PID 3776 wrote to memory of 4580	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	100
PID 3776 wrote to memory of 2812	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	101
PID 3776 wrote to memory of 2812	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	101
PID 3776 wrote to memory of 2812	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	101
PID 3776 wrote to memory of 2540	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	102
PID 3776 wrote to memory of 2540	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	102
PID 3776 wrote to memory of 2540	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	102
PID 3776 wrote to memory of 2784	3776	3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe	103

C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
"C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe"
1⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Loads dropped DLL
- Adds Run key to start application
- Checks whether UAC is enabled
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3776
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2232
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1628
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3624
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1272
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2356
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2184
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3620
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2568
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2440
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4588
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3024
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2168
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1180
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2436
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4016
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4872
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3492
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4064
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4580
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2812
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2540
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2784
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3248
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4060
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3040
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4916
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2728
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3400
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3060
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1480
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:984
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2200
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3420
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2260
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4204
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4472
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4636
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4800
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:792
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:572
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:352
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:244
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:240
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1960
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3916
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4164
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2296
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3984
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2632
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3092
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1504
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1012
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4724
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:936
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3476
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3944
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4428
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3544
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1444
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1448
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4660
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1676
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2008
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1984
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4328
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3960
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5036
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4804
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2336
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1860
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4592
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3468
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2956
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1128
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2872
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:788
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1592
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3472
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4412
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3848
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2140
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2484
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1732
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2724
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1608
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1540
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3016
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3512
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3632
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3424
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3448
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3112
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:328
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3360
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1484
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:656
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1140
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1328
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1404
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3908
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4728
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1836
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3336
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2876
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1928
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1968
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3340
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5064
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4120
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1580
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3372
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1780
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1160
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3968
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1980
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4068
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1720
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2528
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4672
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4688
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4832
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4132
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4576
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3164
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1232
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2908
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4836
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1144
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2716
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3584
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2760
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3636
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4260
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2860
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1604
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2240
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1516
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4584
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3924
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2576
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1792
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:776
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2992
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3580
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2136
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2068
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1332
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2248
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:496
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4080
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1284
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1244
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5040
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2212
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4728
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5132
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5140
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5148
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5156
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5164
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5172
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5180
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5188
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5196
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5204
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5212
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5220
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5228
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5236
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5244
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5252
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5260
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5268
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5276
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5284
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5292
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5300
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5308
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5316
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5324
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5332
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5340
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5348
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5356
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5364
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5372
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5380
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5388
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5396
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5404
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5412
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5420
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5428
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5436
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5444
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5452
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5460
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5468
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5476
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5484
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5492
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5500
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5508
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5516
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5524
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5532
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5540
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5548
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5556
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5564
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5572
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5580
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5588
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5596
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5604
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5612
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5620
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5628
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5636
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5644
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5652
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5660
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5668
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5676
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5684
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5692
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5700
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5712
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5720
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5728
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5736
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5744
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5752
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5760
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5768
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5776
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5784
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5792
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5800
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5808
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5816
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5824
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5832
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5840
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5848
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5856
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5864
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5872
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5880
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5888
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5896
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5904
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5912
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5920
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5928
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5936
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5944
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5952
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5960
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5968
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5976
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5984
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5992
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6000
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6008
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6016
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6024
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6032
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6040
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6048
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6056
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6064
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6072
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6080
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6088
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6096
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6104
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6112
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6120
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6128
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6136
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4252
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5500
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6148
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6156
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6168
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6176
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6184
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6192
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6200
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6208
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6216
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6224
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6232
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6240
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6248
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6256
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6264
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6272
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6280
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6288
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6296
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6304
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6312
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6320
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6328
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6336
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6344
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6352
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6360
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6368
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6376
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6384
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6392
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6400
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6408
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6416
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6424
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6432
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6440
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6448
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6456
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6464
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6472
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6480
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6488
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6496
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6504
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6512
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6520
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6528
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6536
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6544
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6552
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6560
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6568
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6576
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6584
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6592
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6600
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6608
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6616
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6624
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6632
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6640
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6648
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6656
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6668
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6676
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6684
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6692
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6700
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6708
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6716
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6724
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6732
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6740
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6748
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6756
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6764
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6772
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6780
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6788
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6796
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6804
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6812
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6820
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6828
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6836
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6844
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6852
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6860
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6868
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6876
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6884
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6892
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6900
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6908
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6916
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6924
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6932
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6940
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6948
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6956
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6964
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6972
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6980
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6988
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6996
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7004
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7012
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7020
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7028
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7036
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7044
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7052
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7060
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7068
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7076
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7084
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7092
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7100
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7108
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7116
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7124
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7136
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7144
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7152
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7160
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:5708
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6304
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7120
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:6664
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7176
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7184
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7192
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7200
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7208
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7216
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7224
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7232
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7240
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7248
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7256
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7264
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7272
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7280
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7288
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7296
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7304
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7312
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7320
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7328
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7336
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7344
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7352
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7360
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7368
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7376
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7384
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7392
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7400
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7408
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7416
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7424
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7432
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7440
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7448
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7456
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7464
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7472
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7480
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7488
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7496
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7504
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7512
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7520
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7528
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7536
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7544
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7552
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7560
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7568
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7576
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7584
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7592
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7600
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7608
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7616
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7624
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7632
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7640
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7648
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7656
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7664
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7672
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7680
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7688
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7696
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7704
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7712
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7724
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7732
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7740
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7748
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7756
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7764
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7772
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7780
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7788
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7796
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7804
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7812
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7820
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7828
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7836
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7844
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7852
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7860
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7868
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7876
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7884
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7892
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7900
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7908
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7916
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7924
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7932
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7940
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7948
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7956
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7964
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7972
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7980
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7988
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7996
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8004
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8012
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8020
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8028
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8036
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8044
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8052
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8060
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8068
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8076
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8084
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8092
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8100
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8108
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8116
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8124
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8132
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8140
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8148
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8156
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8164
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8172
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8180
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8188
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2120
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:840
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4460
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:772
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:580
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4192
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2116
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:3028
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1864
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:2460
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:4248
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:364
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1500
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1344
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:1736
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:872
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:7908
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8200
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8208
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8216
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8224
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8232
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8240
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8248
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8256
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8264
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8272
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8280
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8288
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8296
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8304
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8312
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8320
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8328
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8336
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8344
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8352
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8360
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8368
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8376
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8384
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8392
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8400
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8408
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8416
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8424
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8432
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8440
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8448
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8456
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8464
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8472
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8480
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8488
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8496
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8504
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8512
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8520
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8528
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8536
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8544
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8552
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8560
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8568
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8576
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8584
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8592
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8600
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8608
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8616
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8624
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8632
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8640
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8648
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8656
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8664
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8672
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8680
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8688
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8696
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8704
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8712
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8720
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8728
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8736
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8744
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8752
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8760
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8768
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8776
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8784
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8792
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8800
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8808
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8816
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8824
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8832
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8840
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8848
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8856
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8864
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8872
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8880
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8888
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8896
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8904
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8912
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8920
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8928
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8936
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8944
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8952
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8960
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8968
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8976
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8984
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8992
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9000
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9008
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9016
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9024
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9032
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9040
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9048
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9056
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9064
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9072
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9080
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9088
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9096
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9104
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9112
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9120
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9128
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9136
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9144
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9152
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9160
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9168
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9176
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9184
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9192
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9200
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9208
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:664
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:8588
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9220
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9228
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9236
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9244
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9252
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9260
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9268
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9276
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9284
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9292
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9300
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9308
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9316
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9324
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9332
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9340
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9348
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9356
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9364
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9372
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9380
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9388
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9396
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9404
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9412
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9420
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9428
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9436
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9444
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9452
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9460
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9468
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9476
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9484
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9492
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9500
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9508
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9516
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9524
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9532
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9540
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9548
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9556
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9564
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9572
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9580
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9588
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9596
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9604
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9612
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9620
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9628
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9636
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9644
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9652
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9660
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9668
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9676
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9684
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9692
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9700
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9708
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9716
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9724
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9732
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9740
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9748
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9756
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9764
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9772
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9780
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9788
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9796
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9804
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9812
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9820
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9828
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9836
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9844
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9852
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9860
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9868
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9876
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9884
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9892
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9900
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9908
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9916
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9924
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9932
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9940
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9948
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9956
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9964
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9972
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9980
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9988
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9996
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10004
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10012
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10020
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10028
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10036
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10044
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10052
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10060
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10068
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10076
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10084
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10092
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10100
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10108
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10116
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10124
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10132
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10140
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10148
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10156
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10164
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10172
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10180
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10188
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10196
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10204
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10212
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10220
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10228
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10236
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:9380
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10188
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10248
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10256
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10264
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10272
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10280
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10288
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10296
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10304
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10312
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10320
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10328
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10336
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10344
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10352
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10360
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10368
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10376
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10384
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10392
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10400
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10408
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10416
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10424
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10432
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10440
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10448
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10456
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10464
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10472
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10480
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10488
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10496
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10504
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10512
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10520
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10528
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10536
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10544
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10552
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10560
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10568
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10576
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10584
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10592
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10600
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10608
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10616
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10624
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10632
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10640
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10648
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10656
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10664
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10672
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10680
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10688
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10696
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10704
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10712
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10720
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10728
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10736
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10744
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10752
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10760
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10768
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10776
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10784
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10792
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10800
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10808
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10816
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10824
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10832
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10840
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10848
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10856
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10864
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10872
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10880
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10888
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10896
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10904
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10912
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10920
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10928
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10936
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10944
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10952
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10960
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10968
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10976
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10984
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10992
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11000
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11008
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11016
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11024
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11032
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11040
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11048
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11056
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11064
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11072
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11080
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11088
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11096
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11104
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11112
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11120
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11128
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11136
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11144
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11152
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11160
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11168
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11176
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11184
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11192
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11200
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11208
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11216
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11224
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11232
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11240
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11248
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11256
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:10988
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11268
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11276
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11284
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11292
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11300
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11308
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11316
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11324
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11332
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11340
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11348
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11356
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11364
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11372
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11380
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11388
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11396
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11404
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11412
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11420
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11428
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11436
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11444
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11452
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11460
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11468
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11476
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11484
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11492
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11500
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11508
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11516
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11524
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11532
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11540
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11548
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11556
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11564
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11572
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11580
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11588
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11596
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11604
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11612
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11620
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11628
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11640
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11648
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11656
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11664
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11672
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11680
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11688
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11696
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11704
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11712
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11720
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11728
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11736
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11744
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11752
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11760
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11768
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11776
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11784
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\muunntjxfspupdhxniwzzzivurztufjpc"
  2⤵
  PID:11792
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\wwzgn"
  2⤵
  PID:11800
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\wwzgn"
  2⤵
  PID:11808
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\wwzgn"
  2⤵
  PID:11816
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\wwzgn"
  2⤵
  PID:11824
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\wwzgn"
  2⤵
  PID:11832
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\wwzgn"
  2⤵
  PID:11840
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\wwzgn"
  2⤵
  PID:11848
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\wwzgn"
  2⤵
  PID:11856
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\wwzgn"
  2⤵
  PID:11864
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\wwzgn"
  2⤵
  PID:11872
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\wwzgn"
  2⤵
  PID:11880
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\wwzgn"
  2⤵
  PID:11888
- C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe
  C:\Users\Admin\AppData\Local\Temp\3c74031a1ddcfbff9691d2992ecd540eb82c4b781bda9ffc5125d40ec712589d.exe /stext "C:\Users\Admin\AppData\Local\Temp\wwzgn"
  2⤵
  PID:11896

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\57613b55.dll

Filesize
8KB

MD5
e1db733e43aa8d065fb7e8669db76524

SHA1
3f9c62ee28959959271632fdc7f5387d539a1d23

SHA256
9e65d9e8ebb895f3b03c95ce64f044c70251fff444a4bcbee83f558b599a614d

SHA512
3f6106f32932e72d197865f7b796eba072c8ab20c22b4d205f27de9b9fc6c139be8450ae25541fbdac37a06bc3ec2d1fab3f9b3216201a9231b70fcde6fb8eb3

Download Submit
C:\Users\Admin\AppData\Local\Temp\Log\logs.dat

Filesize
144B

MD5
dba2e40f6372985bfe0b686b12afff0b

SHA1
329a507bea06ee2af235320cb7ede4fb1758e173

SHA256
a3b292293c809068440d67b65f844025f041b7d64185b31cb64c7fc620388c2a

SHA512
024bab07e18f3083583729fa879aa15167452200201eeb55b44b55118ae85fa4b3a953ecf01c24c67324db72bf926e8e653fbb496978a5e57be4e476be2a9695

Download Submit
memory/2232-32-0x0000000000420000-0x0000000000D82000-memory.dmp

Filesize
9.4MB

Download
memory/3776-37-0x0000000075D40000-0x0000000075E30000-memory.dmp

Filesize
960KB

Download
memory/3776-35-0x0000000075D40000-0x0000000075E30000-memory.dmp

Filesize
960KB

Download
memory/3776-5-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-3-0x0000000075D40000-0x0000000075E30000-memory.dmp

Filesize
960KB

Download
memory/3776-17-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-34-0x0000000075D56000-0x0000000075D57000-memory.dmp

Filesize
4KB

Download
memory/3776-19-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-23-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-22-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-24-0x0000000000420000-0x0000000000D82000-memory.dmp

Filesize
9.4MB

Download
memory/3776-25-0x0000000000420000-0x0000000000D82000-memory.dmp

Filesize
9.4MB

Download
memory/3776-26-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-27-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-28-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-29-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-31-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-2-0x0000000075D40000-0x0000000075E30000-memory.dmp

Filesize
960KB

Download
memory/3776-0-0x0000000000420000-0x0000000000D82000-memory.dmp

Filesize
9.4MB

Download
memory/3776-4-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-36-0x0000000075D40000-0x0000000075E30000-memory.dmp

Filesize
960KB

Download
memory/3776-18-0x0000000075D40000-0x0000000075E30000-memory.dmp

Filesize
960KB

Download
memory/3776-33-0x0000000000420000-0x0000000000D82000-memory.dmp

Filesize
9.4MB

Download
memory/3776-1-0x0000000075D56000-0x0000000075D57000-memory.dmp

Filesize
4KB

Download
memory/3776-46-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-45-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-56-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-57-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-67-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-68-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-78-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-79-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-87-0x0000000001190000-0x00000000011A9000-memory.dmp

Filesize
100KB

Download
memory/3776-86-0x0000000001190000-0x00000000011A9000-memory.dmp

Filesize
100KB

Download
memory/3776-83-0x0000000001190000-0x00000000011A9000-memory.dmp

Filesize
100KB

Download
memory/3776-88-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-96-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download
memory/3776-95-0x0000000010000000-0x000000001007F000-memory.dmp

Filesize
508KB

Download

Analysis

Sharing

General

Malware Config

Extracted

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads