Malware Analysis Report

2025-03-15 04:21

Sample ID 241026-aw9l9syakq
Target 79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N
SHA256 79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283
Tags
discovery spyware stealer
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283

Threat Level: Shows suspicious behavior

The file 79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery spyware stealer

Reads user/profile data of web browsers

Drops file in Program Files directory

Unsigned PE

Program crash

System Location Discovery: System Language Discovery

Suspicious behavior: EnumeratesProcesses

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-10-26 00:34

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-10-26 00:34

Reported

2024-10-26 00:36

Platform

win7-20240903-en

Max time kernel

110s

Max time network

17s

Command Line

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

Signatures

Reads user/profile data of web browsers

spyware stealer

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\ReadBlock.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2112 -s 160

Network

N/A

Files

memory/2112-0-0x0000000000400000-0x000000000048D000-memory.dmp

memory/2112-1-0x0000000000400000-0x000000000048D000-memory.dmp

memory/2112-2-0x0000000000400000-0x000000000048D000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-10-26 00:34

Reported

2024-10-26 00:36

Platform

win10v2004-20241007-en

Max time kernel

120s

Max time network

98s

Command Line

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

Signatures

Reads user/profile data of web browsers

spyware stealer

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 956 wrote to memory of 4848 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 956 wrote to memory of 4848 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 956 wrote to memory of 4848 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 4848 wrote to memory of 3936 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 4848 wrote to memory of 3936 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 4848 wrote to memory of 3936 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3936 wrote to memory of 3592 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3936 wrote to memory of 3592 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3936 wrote to memory of 3592 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3592 wrote to memory of 2268 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3592 wrote to memory of 2268 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3592 wrote to memory of 2268 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 2268 wrote to memory of 3132 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 2268 wrote to memory of 3132 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 2268 wrote to memory of 3132 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3132 wrote to memory of 1724 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3132 wrote to memory of 1724 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3132 wrote to memory of 1724 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 1724 wrote to memory of 1040 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 1724 wrote to memory of 1040 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 1724 wrote to memory of 1040 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 1040 wrote to memory of 2560 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 1040 wrote to memory of 2560 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 1040 wrote to memory of 2560 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 2560 wrote to memory of 2252 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 2560 wrote to memory of 2252 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 2560 wrote to memory of 2252 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 2252 wrote to memory of 1964 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 2252 wrote to memory of 1964 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 2252 wrote to memory of 1964 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 1964 wrote to memory of 3424 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 1964 wrote to memory of 3424 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 1964 wrote to memory of 3424 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3424 wrote to memory of 3980 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3424 wrote to memory of 3980 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3424 wrote to memory of 3980 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3980 wrote to memory of 4308 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3980 wrote to memory of 4308 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3980 wrote to memory of 4308 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 4308 wrote to memory of 4568 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 4308 wrote to memory of 4568 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 4308 wrote to memory of 4568 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 4568 wrote to memory of 2008 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 4568 wrote to memory of 2008 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 4568 wrote to memory of 2008 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 2008 wrote to memory of 4860 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 2008 wrote to memory of 4860 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 2008 wrote to memory of 4860 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 4860 wrote to memory of 3352 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 4860 wrote to memory of 3352 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 4860 wrote to memory of 3352 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3352 wrote to memory of 3596 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3352 wrote to memory of 3596 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3352 wrote to memory of 3596 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3596 wrote to memory of 1920 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3596 wrote to memory of 1920 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3596 wrote to memory of 1920 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 1920 wrote to memory of 4772 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 1920 wrote to memory of 4772 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 1920 wrote to memory of 4772 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 4772 wrote to memory of 3048 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 4772 wrote to memory of 3048 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 4772 wrote to memory of 3048 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe
PID 3048 wrote to memory of 2556 N/A C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

Processes

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3128 -ip 3128

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 2256 -ip 2256

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 496 -p 4416 -ip 4416

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 4920 -ip 4920

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 916 -ip 916

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 548 -p 3460 -ip 3460

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 3128 -s 428

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2972 -ip 2972

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 3376 -ip 3376

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 724 -p 2876 -ip 2876

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 748 -p 4752 -ip 4752

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 916 -s 388

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 4104 -ip 4104

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 892 -ip 892

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4416 -s 440

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 4600 -ip 4600

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 728 -p 4648 -ip 4648

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 808 -p 4728 -ip 4728

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4920 -s 440

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 672 -p 4584 -ip 4584

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 1304 -ip 1304

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 736 -p 2484 -ip 2484

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 840 -p 4636 -ip 4636

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 3580 -ip 3580

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 2492 -ip 2492

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 828 -p 3864 -ip 3864

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 812 -p 2128 -ip 2128

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 860 -p 2072 -ip 2072

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 672 -p 2052 -ip 2052

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 856 -p 3256 -ip 3256

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 844 -p 3264 -ip 3264

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 732 -p 4240 -ip 4240

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 668 -p 2172 -ip 2172

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 4932 -ip 4932

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 2340 -ip 2340

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 748 -p 3416 -ip 3416

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 832 -p 2348 -ip 2348

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 548 -p 232 -ip 232

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 736 -p 2552 -ip 2552

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 856 -p 1932 -ip 1932

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 876 -p 4140 -ip 4140

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 848 -p 3788 -ip 3788

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 1504 -ip 1504

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 896 -p 2136 -ip 2136

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 920 -p 2256 -ip 2256

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 1120 -ip 1120

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 884 -p 4464 -ip 4464

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 948 -p 4868 -ip 4868

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 4764 -ip 4764

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 716 -p 4468 -ip 4468

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 676 -p 2972 -ip 2972

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 684 -p 892 -ip 892

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 964 -p 3460 -ip 3460

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 992 -p 3376 -ip 3376

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 948 -p 4104 -ip 4104

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1008 -p 4752 -ip 4752

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 692 -p 2876 -ip 2876

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 756 -p 4584 -ip 4584

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 720 -p 4600 -ip 4600

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 968 -p 1304 -ip 1304

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 884 -p 2484 -ip 2484

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 728 -p 4728 -ip 4728

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1004 -p 4648 -ip 4648

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 920 -p 3580 -ip 3580

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 916 -p 4636 -ip 4636

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 972 -p 2492 -ip 2492

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 3864 -ip 3864

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 692 -p 2128 -ip 2128

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 900 -p 3264 -ip 3264

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 832 -p 2052 -ip 2052

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 964 -p 2072 -ip 2072

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 4948 -ip 4948

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1016 -p 4240 -ip 4240

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 916 -p 3256 -ip 3256

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 2172 -ip 2172

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2340 -ip 2340

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 968 -p 3416 -ip 3416

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 900 -p 4932 -ip 4932

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 2348 -ip 2348

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1016 -p 4140 -ip 4140

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 988 -p 2552 -ip 2552

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 736 -p 1932 -ip 1932

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 748 -p 1504 -ip 1504

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3788 -ip 3788

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 960 -p 2136 -ip 2136

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 972 -p 232 -ip 232

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4468 -ip 4468

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 880 -p 4868 -ip 4868

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 4764 -ip 4764

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 4464 -ip 4464

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 1120 -ip 1120

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 968 -p 4428 -ip 4428

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 812 -p 4948 -ip 4948

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 900 -p 4920 -ip 4920

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1120 -s 440

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 884 -p 3128 -ip 3128

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4428 -s 392

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 944 -p 916 -ip 916

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4948 -s 428

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 880 -p 4416 -ip 4416

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 3128 -s 428

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 920 -p 8032 -ip 8032

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 8032 -ip 8032

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 496 -p 13872 -ip 13872

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 900 -p 13872 -ip 13872

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 976 -p 9212 -ip 9212

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 980 -p 8488 -ip 8488

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 992 -p 8060 -ip 8060

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 10448 -ip 10448

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 11448 -ip 11448

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 920 -p 8084 -ip 8084

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 9212 -s 428

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 752 -p 4428 -ip 4428

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 992 -p 8264 -ip 8264

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 8488 -ip 8488

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 720 -p 10448 -ip 10448

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 13872 -s 392

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 712 -p 8060 -ip 8060

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 11448 -s 432

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 8084 -s 432

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 496 -p 8264 -ip 8264

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 11448 -ip 11448

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 680 -p 8084 -ip 8084

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 800 -p 9212 -ip 9212

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 9212 -s 476

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 11448 -s 472

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 8084 -s 432

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 964 -p 6856 -ip 6856

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 6856 -s 448

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 700 -p 6856 -ip 6856

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 6856 -s 448

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 964 -p 2752 -ip 2752

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2752 -s 436

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 984 -p 1372 -ip 1372

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1372 -s 436

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 2752 -ip 2752

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2752 -s 436

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 988 -p 1372 -ip 1372

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1372 -s 436

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 496 -p 1812 -ip 1812

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1812 -s 440

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 4392 -ip 4392

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4392 -s 400

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 896 -p 1812 -ip 1812

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 4392 -ip 4392

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1812 -s 440

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4392 -s 400

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 860 -p 6840 -ip 6840

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 6840 -s 448

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 712 -p 6840 -ip 6840

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 6840 -s 444

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 860 -p 12648 -ip 12648

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 12648 -s 448

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 12648 -ip 12648

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 12648 -s 448

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 740 -p 13516 -ip 13516

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 13516 -s 448

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 988 -p 13516 -ip 13516

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 13516 -s 468

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 488 -p 12692 -ip 12692

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 12692 -s 448

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 740 -p 12692 -ip 12692

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 12692 -s 448

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 724 -p 13228 -ip 13228

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 13228 -s 448

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 652 -p 13228 -ip 13228

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 13228 -s 448

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 720 -p 10536 -ip 10536

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 740 -p 10592 -ip 10592

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 960 -p 10628 -ip 10628

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1012 -p 10708 -ip 10708

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 996 -p 10828 -ip 10828

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 752 -p 10764 -ip 10764

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 10628 -s 444

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 10536 -s 436

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 488 -p 10856 -ip 10856

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 10592 -s 436

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 988 -p 10908 -ip 10908

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 10708 -s 396

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 712 -p 10828 -ip 10828

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 10764 -ip 10764

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 836 -p 10988 -ip 10988

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1020 -p 10856 -ip 10856

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 676 -p 11072 -ip 11072

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 11236 -ip 11236

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 11120 -ip 11120

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 11340 -ip 11340

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 11380 -ip 11380

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1012 -p 11144 -ip 11144

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 956 -p 11176 -ip 11176

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 724 -p 10908 -ip 10908

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 712 -p 11508 -ip 11508

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 804 -p 10988 -ip 10988

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 988 -p 11712 -ip 11712

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 11800 -ip 11800

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 788 -p 11072 -ip 11072

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 11844 -ip 11844

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 12196 -ip 12196

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 984 -p 11340 -ip 11340

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 668 -p 12260 -ip 12260

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 12340 -ip 12340

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 988 -p 11508 -ip 11508

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 680 -p 11236 -ip 11236

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 488 -p 11176 -ip 11176

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 756 -p 11144 -ip 11144

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 11808 -ip 11808

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 932 -p 11380 -ip 11380

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 11712 -ip 11712

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 844 -p 11120 -ip 11120

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 984 -p 11844 -ip 11844

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 11800 -ip 11800

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 12196 -ip 12196

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 796 -p 12340 -ip 12340

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4036 -ip 4036

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 720 -p 12260 -ip 12260

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 960 -p 2224 -ip 2224

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 11380 -s 428

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 756 -p 10536 -ip 10536

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 704 -p 11808 -ip 11808

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4036 -s 448

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 12260 -s 476

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 832 -p 10708 -ip 10708

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 10628 -ip 10628

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 12340 -s 428

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 548 -p 10592 -ip 10592

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 748 -p 2224 -ip 2224

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 984 -p 4232 -ip 4232

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 4232 -ip 4232

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4036 -ip 4036

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4036 -s 448

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 13976 -ip 13976

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 13976 -s 448

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 800 -p 13976 -ip 13976

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 13976 -s 448

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 908 -p 5880 -ip 5880

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 548 -p 5896 -ip 5896

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 5920 -ip 5920

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 984 -p 5940 -ip 5940

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5880 -s 444

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 908 -p 5956 -ip 5956

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5896 -s 444

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 5980 -ip 5980

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5920 -s 448

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 6000 -ip 6000

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1020 -p 6016 -ip 6016

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 908 -p 6036 -ip 6036

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 860 -p 4944 -ip 4944

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 500 -p 6076 -ip 6076

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 752 -p 6060 -ip 6060

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 6108 -ip 6108

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 5956 -ip 5956

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 5980 -ip 5980

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 824 -p 5940 -ip 5940

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 6092 -ip 6092

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 6124 -ip 6124

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 6140 -ip 6140

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 636 -ip 636

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1040 -p 116 -ip 116

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1072 -p 6164 -ip 6164

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1052 -p 6216 -ip 6216

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 6232 -ip 6232

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 6260 -ip 6260

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 800 -p 6184 -ip 6184

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 824 -p 6200 -ip 6200

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 6248 -ip 6248

C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe

"C:\Users\Admin\AppData\Local\Temp\79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 6304 -ip 6304

Network

Country Destination Domain Proto
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 226.108.222.173.in-addr.arpa udp
US 8.8.8.8:53 72.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
US 8.8.8.8:53 28.118.140.52.in-addr.arpa udp
US 8.8.8.8:53 217.106.137.52.in-addr.arpa udp
US 8.8.8.8:53 200.163.202.172.in-addr.arpa udp
US 8.8.8.8:53 206.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 19.229.111.52.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Temp\pUcA20D.tmp

MD5 a04681b3ae379d65c956d268353e3790
SHA1 8be2d520d61d658b793ceb18ca7dc5cfd3493c16
SHA256 79efa678fddb8689c87bed17601634b9fcd96ff41e900e066d96b55ec85f4283
SHA512 9663416cf4545e9585c0535d9a97092fc4f3f6643691600875ee9032d1ddb5ca59f87f69713c6d920241a2bd5fd09094ea09ef6599c1758a8cf5078fa698ef9c

C:\Users\Admin\AppData\Local\Temp\RCXA241.tmp

MD5 04b1b66acf9b49689083abc74090f2f2
SHA1 f95385f62900d18e6d59b605ddea9db3e0bb96ae
SHA256 e6b31b1e3c6d02d7bca076fa4d61a234f09abd096dcdb14d0464e9db26801dc5
SHA512 354fd88c99e352ce5f5343289a268f4d1f7974cca4e10ce7275c6274df9ce4ad658e5d35292a4378994284195095c67e23e3fd72c568831f76b289c350ce4f58

C:\Users\Admin\AppData\Local\Temp\RCXA2E2.tmp

MD5 803191ee55414520eb74c9eceb00a832
SHA1 2aefe8caef6abcc9c5af268eca5922e1cddd222f
SHA256 29e66167d17e96d1484fbc9b6e2899c1374a2d6e1b82b8d62630ebe2f387cd97
SHA512 7afebb16c608c0f0a47b9a58aaf0e66ff7dd0b921dd78e5d915ae0c494a4de1626346061390684c40f58147f263c28ce939dc20d21c54f909902b2d0a76d1529

C:\Users\Admin\AppData\Local\Temp\RCXA23F.tmp

MD5 e28f0276cb4f78a962b9a3ea7f662e23
SHA1 ee9ed8b911e09e785b4bda08f860545d5df7db3b
SHA256 5f2dc38df8d3a73acabd35a39bede972613dbaea779fca9a06ec9a064da0a3b0
SHA512 c19afcf1bd71d98320e8365336d9bcd5f5b8cb8717a5cad33f57de6a779ea74ec21fe8c62ee592b5da4bfe1be356b1cd00c76b36a5ce9c9065f742b5e49f2637

C:\Users\Admin\AppData\Local\Temp\RCXA23D.tmp

MD5 aef61b6d65a9237cdd3a693e6271d53e
SHA1 863693b53a4cba10a5ae96200ecdcf98e2248746
SHA256 ab81b90e82941100a6e1cea698148f4066df4feacf083bdeb92bbbecf5330f82
SHA512 32e952dae62f525e6a75bfea2f24e79dc4ed898b84018026a5e68ca5a486e2908eb96079cfa8afec0eac502cd581575df03515b40bff1cd3b6c456778564b22c

memory/2972-2666-0x0000000000400000-0x000000000048D000-memory.dmp

memory/3460-2668-0x0000000000400000-0x000000000048D000-memory.dmp

memory/4104-2670-0x0000000000400000-0x000000000048D000-memory.dmp

memory/3376-2669-0x0000000000400000-0x000000000048D000-memory.dmp

memory/4584-2674-0x0000000000400000-0x000000000048D000-memory.dmp

memory/2484-2676-0x0000000000400000-0x000000000048D000-memory.dmp

memory/4728-2718-0x0000000000400000-0x000000000048D000-memory.dmp

memory/2492-2722-0x0000000000400000-0x000000000048D000-memory.dmp

memory/2128-2724-0x0000000000400000-0x000000000048D000-memory.dmp

memory/3264-2723-0x0000000000400000-0x000000000048D000-memory.dmp

memory/3864-2721-0x0000000000400000-0x000000000048D000-memory.dmp

memory/4636-2720-0x0000000000400000-0x000000000048D000-memory.dmp

memory/4648-2719-0x0000000000400000-0x000000000048D000-memory.dmp

memory/3580-2713-0x0000000000400000-0x000000000048D000-memory.dmp

memory/1304-2675-0x0000000000400000-0x000000000048D000-memory.dmp

memory/4600-2673-0x0000000000400000-0x000000000048D000-memory.dmp

memory/4752-2672-0x0000000000400000-0x000000000048D000-memory.dmp

memory/2876-2671-0x0000000000400000-0x000000000048D000-memory.dmp

memory/2256-2665-0x0000000000400000-0x000000000048D000-memory.dmp

memory/892-2667-0x0000000000400000-0x000000000048D000-memory.dmp

memory/4240-2727-0x0000000000400000-0x000000000048D000-memory.dmp

memory/3256-2729-0x0000000000400000-0x000000000048D000-memory.dmp

memory/2340-2730-0x0000000000400000-0x000000000048D000-memory.dmp

memory/3416-2733-0x0000000000400000-0x000000000048D000-memory.dmp

memory/1932-2736-0x0000000000400000-0x000000000048D000-memory.dmp

memory/2136-2739-0x0000000000400000-0x000000000048D000-memory.dmp

memory/232-2740-0x0000000000400000-0x000000000048D000-memory.dmp

memory/4468-2743-0x0000000000400000-0x000000000048D000-memory.dmp

memory/4764-2742-0x0000000000400000-0x000000000048D000-memory.dmp

memory/4868-2741-0x0000000000400000-0x000000000048D000-memory.dmp

memory/1504-2738-0x0000000000400000-0x000000000048D000-memory.dmp

memory/3788-2737-0x0000000000400000-0x000000000048D000-memory.dmp

memory/2552-2735-0x0000000000400000-0x000000000048D000-memory.dmp

memory/4140-2734-0x0000000000400000-0x000000000048D000-memory.dmp

memory/4932-2732-0x0000000000400000-0x000000000048D000-memory.dmp

memory/2348-2731-0x0000000000400000-0x000000000048D000-memory.dmp

memory/2172-2728-0x0000000000400000-0x000000000048D000-memory.dmp

memory/2052-2726-0x0000000000400000-0x000000000048D000-memory.dmp

memory/2072-2725-0x0000000000400000-0x000000000048D000-memory.dmp

memory/4464-2744-0x0000000000400000-0x000000000048D000-memory.dmp

memory/4920-2785-0x0000000000400000-0x000000000048D000-memory.dmp

memory/916-2786-0x0000000000400000-0x000000000048D000-memory.dmp

memory/4416-2799-0x0000000000400000-0x000000000048D000-memory.dmp

memory/8032-2901-0x0000000000400000-0x000000000048D000-memory.dmp

memory/4948-3153-0x0000000000400000-0x000000000048D000-memory.dmp

memory/1120-3219-0x0000000000400000-0x000000000048D000-memory.dmp

memory/8060-3223-0x0000000000400000-0x000000000048D000-memory.dmp

memory/8264-3225-0x0000000000400000-0x000000000048D000-memory.dmp

memory/8488-3224-0x0000000000400000-0x000000000048D000-memory.dmp

memory/10448-3222-0x0000000000400000-0x000000000048D000-memory.dmp

memory/4428-3221-0x0000000000400000-0x000000000048D000-memory.dmp

memory/956-3220-0x0000000000400000-0x000000000048D000-memory.dmp

memory/3128-3218-0x0000000000400000-0x000000000048D000-memory.dmp

memory/13872-3226-0x0000000000400000-0x000000000048D000-memory.dmp

memory/11448-3227-0x0000000000400000-0x000000000048D000-memory.dmp

memory/9212-3228-0x0000000000400000-0x000000000048D000-memory.dmp

memory/4848-3229-0x0000000000400000-0x000000000048D000-memory.dmp

memory/3936-3230-0x0000000000400000-0x000000000048D000-memory.dmp

memory/1040-3235-0x0000000000400000-0x000000000048D000-memory.dmp

memory/1724-3234-0x0000000000400000-0x000000000048D000-memory.dmp

memory/3132-3233-0x0000000000400000-0x000000000048D000-memory.dmp

memory/2268-3232-0x0000000000400000-0x000000000048D000-memory.dmp

memory/3592-3231-0x0000000000400000-0x000000000048D000-memory.dmp

memory/2560-3236-0x0000000000400000-0x000000000048D000-memory.dmp

C:\Program Files\7-Zip\7zFM.exe

MD5 32731a929ba73198de42bc79ec39583a
SHA1 401784542ae2df2ac7b2a2e0d35c1aba64cc0f47
SHA256 c0ffddff80b169f123c1c70bac3099716fcb2f006139b0195d9cd61a70af18bd
SHA512 463e2f448b670455cae5efe1d623bca2a059494af4e54b8d76b0791333779f46aac69f3bf1a1a927fe5452fe056fb5c0a923290e54cca8614bf4562a0b889ee4

C:\Program Files\7-Zip\Uninstall.exe

MD5 f3cb667440a4905eade6821b6e8db8d7
SHA1 16de577346ba76154b99d11400f01257681297c4
SHA256 260297e7d637ebc691559440a5b31a4c60b2428bba9aee34dfc3e2100cbae9b2
SHA512 52bd80bd2c1ec245f14cba75a610d297fb8c33892fe20fdee6adbce8fceda779bfc97afc93302fbdd28d98f5973255a982b8430f7f2f43d115bd572a466f8990

C:\Users\Admin\AppData\Local\Temp\pUcB9DA.tmp

MD5 855515234ec06a48e27529ceca408827
SHA1 a08cc476e406a34331fcda6bd4c1a90df6b82ef5
SHA256 b4a637adfb16abd9525ce49a77f8ed6fd1824c5f41670b5185d60ea4d7abd624
SHA512 70b063bfbf2633c784c654663ff970ad2f5ac7bca8a7b4026b46521aed9827e68543011a3e71315aa5bd0efc0f366edd46bc3c0602866272c6923b18d25a7c84

C:\Program Files\7-Zip\7zG.exe

MD5 f016920b00d1e87b3225d9b67a983506
SHA1 89e020edac0a4a18c29ad5624dd702e5a9fd8ead
SHA256 764d4aba31276ca9fb762ce0c07decada23bebe0acc21f44a818729a69204dc6
SHA512 4c92973d8566ede82f0f0d4120e1c9c8daac2d17ef8a7983def724719027e8ca606ec7e0e15fc57bda04c1df917ffe0935a102584705c7cd3dc00a9cc5676aeb

C:\Users\Admin\AppData\Local\Temp\RCXC480.tmp

MD5 c45d49c15aef80d9434e7efbf1f287b4
SHA1 186faaca637a53a6321745ee3359fbaeb9a4d599
SHA256 68cc381bcda242a51140ff0cabc9f7ed35b6f286b64163160c38726634c9f733
SHA512 d4de844b923dac02bd2a1d5c7f9f0a616a23cba1cf87261f4cbe57550c95cb4984ec8554516dbb0eb6073e1a98eb5a723edbeda74219e566de78b7395b1b8b01

C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

MD5 7d0fa16f05293ac67bc6d1460f738477
SHA1 b31713f4b9ce7cf178ad6940e1ff6110ad637aeb
SHA256 5ec1573901819e1caa8289d80584f8c45fac704c49081139b45ffd0423edfd76
SHA512 2b25290ce253f5cc2a0cf576997aae4c101fc973bbeb96f59e3edc7e9cdf90340d5e399bff18039146f975bf4d4d8301f70e01fb7cc36ed1c3eafb9f887ef6f1

C:\Users\Admin\AppData\Local\Temp\RCX1951.tmp

MD5 576957378e211ead38d79d138f40bab9
SHA1 b9191eeec5e8e3f0373c853ba45c853219abf8e8
SHA256 c4a750aee8a1dd3044bd71f9b6ab6770cc5092ab62ebfc870e1756326c6fe137
SHA512 601b0f48b8362f86f388eacbbe66c1d72d4902c429334f180719c2f67f8e83d1c483186e2fedf34454c3b047ab6e4455ba842fac1c2776b911b3f07c9bb11fa0