Analysis Overview
SHA256
30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04
Threat Level: Shows suspicious behavior
The file 30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N was found to be: Shows suspicious behavior.
Malicious Activity Summary
Reads user/profile data of web browsers
Drops file in Program Files directory
Unsigned PE
Program crash
System Location Discovery: System Language Discovery
Suspicious use of WriteProcessMemory
Suspicious behavior: EnumeratesProcesses
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-11-08 12:55
Signatures
Unsigned PE
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Analysis: behavioral2
Detonation Overview
Submitted
2024-11-08 12:55
Reported
2024-11-08 12:57
Platform
win10v2004-20241007-en
Max time kernel
17s
Max time network
98s
Command Line
Signatures
Reads user/profile data of web browsers
Drops file in Program Files directory
Program crash
System Location Discovery: System Language Discovery
Suspicious behavior: EnumeratesProcesses
Suspicious use of WriteProcessMemory
Processes
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 5760 -ip 5760
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 5888 -ip 5888
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 6080 -ip 6080
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 6096 -ip 6096
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 548 -p 6128 -ip 6128
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 6172 -ip 6172
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 6112 -ip 6112
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 6048 -ip 6048
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 5920 -ip 5920
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 6172 -s 428
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 6080 -s 468
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 6128 -s 448
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5760 -s 464
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 6016 -ip 6016
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 6220 -ip 6220
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 6204 -ip 6204
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 5796 -ip 5796
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 5724 -ip 5724
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 5780 -ip 5780
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 5744 -ip 5744
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 572 -p 5824 -ip 5824
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 708 -p 6064 -ip 6064
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 724 -p 6032 -ip 6032
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 744 -p 6188 -ip 6188
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 6156 -ip 6156
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 6236 -ip 6236
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 6112 -ip 6112
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 5888 -ip 5888
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 660 -p 6048 -ip 6048
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 6096 -ip 6096
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 760 -p 5920 -ip 5920
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 776 -p 6204 -ip 6204
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 6016 -ip 6016
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 796 -p 6220 -ip 6220
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 844 -p 5780 -ip 5780
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 5796 -ip 5796
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 5724 -ip 5724
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 5744 -ip 5744
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 764 -p 5824 -ip 5824
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 6032 -ip 6032
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 792 -p 6064 -ip 6064
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 740 -p 6188 -ip 6188
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 6156 -ip 6156
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 764 -p 6236 -ip 6236
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 768 -p 6080 -ip 6080
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 5760 -ip 5760
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 6128 -ip 6128
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 740 -p 6172 -ip 6172
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 6080 -s 468
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5760 -s 464
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 6128 -s 448
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 6172 -s 428
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 740 -p 5904 -ip 5904
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 804 -p 5964 -ip 5964
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 5904 -ip 5904
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 8584 -ip 8584
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5904 -s 444
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 5952 -ip 5952
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 496 -p 5964 -ip 5964
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 3520 -ip 3520
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 9272 -ip 9272
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 8584 -s 444
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 876 -p 5936 -ip 5936
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 8220 -ip 8220
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 716 -p 9012 -ip 9012
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 660 -p 8684 -ip 8684
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 8736 -ip 8736
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 764 -p 5952 -ip 5952
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 9272 -s 436
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 576 -p 8916 -ip 8916
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3520 -s 456
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5936 -ip 5936
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 712 -p 9012 -ip 9012
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 8220 -ip 8220
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 660 -p 8736 -ip 8736
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 804 -p 8684 -ip 8684
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 8916 -ip 8916
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 8916 -s 428
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 8584 -ip 8584
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 8584 -s 444
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 9272 -ip 9272
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 3520 -ip 3520
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 9272 -s 436
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3520 -s 456
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 804 -p 8476 -ip 8476
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 9352 -ip 9352
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 6000 -ip 6000
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 8904 -ip 8904
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 8476 -s 460
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 9352 -s 440
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 6000 -s 372
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 8904 -s 436
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 1904 -ip 1904
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4204 -ip 4204
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 1932 -ip 1932
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 4980 -ip 4980
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 548 -p 4860 -ip 4860
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 848 -p 3468 -ip 3468
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 4452 -ip 4452
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 4912 -ip 4912
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4876 -ip 4876
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 760 -p 1904 -ip 1904
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 884 -p 8628 -ip 8628
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 744 -p 5548 -ip 5548
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 560 -p 4204 -ip 4204
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 5188 -ip 5188
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 5268 -ip 5268
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 8476 -ip 8476
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4876 -s 396
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5188 -s 432
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 5596 -ip 5596
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 912 -p 5580 -ip 5580
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 5612 -ip 5612
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 5688 -ip 5688
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 888 -p 1932 -ip 1932
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 6000 -ip 6000
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 844 -p 4452 -ip 4452
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4980 -ip 4980
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 916 -p 4912 -ip 4912
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 8628 -ip 8628
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 760 -p 5548 -ip 5548
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5688 -s 444
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 792 -p 5268 -ip 5268
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1932 -s 476
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 3468 -ip 3468
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 944 -p 4860 -ip 4860
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 960 -p 9824 -ip 9824
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 5840 -ip 5840
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 8652 -ip 8652
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 800 -p 8836 -ip 8836
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 824 -p 5596 -ip 5596
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 5580 -ip 5580
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 5612 -ip 5612
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 944 -p 9352 -ip 9352
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 8904 -ip 8904
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 780 -p 9824 -ip 9824
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 840 -p 2924 -ip 2924
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 844 -p 5172 -ip 5172
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 716 -p 5840 -ip 5840
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 8652 -ip 8652
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 828 -p 8836 -ip 8836
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 560 -p 2924 -ip 2924
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 5172 -ip 5172
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 708 -p 5124 -ip 5124
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 964 -p 4876 -ip 4876
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 904 -p 5188 -ip 5188
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2924 -s 400
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 716 -p 5432 -ip 5432
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 5204 -ip 5204
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5172 -s 476
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 880 -p 5464 -ip 5464
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 924 -p 5124 -ip 5124
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4876 -s 396
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 832 -p 5688 -ip 5688
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 5984 -ip 5984
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 5432 -ip 5432
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5188 -s 432
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 5204 -ip 5204
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 5464 -ip 5464
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 2740 -ip 2740
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 804 -p 5984 -ip 5984
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 952 -p 8544 -ip 8544
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 2740 -ip 2740
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 5232 -ip 5232
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 5300 -ip 5300
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 916 -p 10148 -ip 10148
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 5284 -ip 5284
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 8832 -ip 8832
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 10148 -s 436
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 9992 -ip 9992
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 8544 -ip 8544
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 11600 -ip 11600
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 10168 -ip 10168
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 952 -p 9708 -ip 9708
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 944 -p 5500 -ip 5500
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 776 -p 10068 -ip 10068
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 8832 -s 444
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 728 -p 5516 -ip 5516
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 696 -p 9952 -ip 9952
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 8456 -ip 8456
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 11640 -ip 11640
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 896 -p 8944 -ip 8944
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 5672 -ip 5672
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 828 -p 5380 -ip 5380
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 860 -p 5232 -ip 5232
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 908 -p 5284 -ip 5284
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 8944 -s 392
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 800 -p 12436 -ip 12436
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 5300 -ip 5300
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 920 -p 12548 -ip 12548
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 5628 -ip 5628
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 12976 -ip 12976
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 876 -p 12372 -ip 12372
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 10232 -ip 10232
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 14064 -ip 14064
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 13000 -ip 13000
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 824 -p 13204 -ip 13204
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 776 -p 9992 -ip 9992
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 860 -p 12252 -ip 12252
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 11764 -ip 11764
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 11600 -ip 11600
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 832 -p 11492 -ip 11492
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 868 -p 12852 -ip 12852
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 828 -p 5220 -ip 5220
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 776 -p 9708 -ip 9708
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 2260 -ip 2260
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 892 -p 12804 -ip 12804
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 11404 -ip 11404
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 2160 -ip 2160
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 968 -p 2304 -ip 2304
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 10168 -ip 10168
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 10068 -ip 10068
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 5500 -ip 5500
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 9952 -ip 9952
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 844 -p 8456 -ip 8456
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 5516 -ip 5516
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 932 -p 11640 -ip 11640
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 5672 -ip 5672
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 5380 -ip 5380
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 704 -p 12436 -ip 12436
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 8456 -s 372
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 840 -p 12548 -ip 12548
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 916 -p 5484 -ip 5484
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 5628 -ip 5628
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 12976 -ip 12976
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 10232 -ip 10232
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 13000 -ip 13000
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 14064 -ip 14064
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 728 -p 12372 -ip 12372
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 696 -p 13204 -ip 13204
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 976 -p 11764 -ip 11764
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 820 -p 12252 -ip 12252
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 896 -p 11492 -ip 11492
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1016 -p 12852 -ip 12852
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 5220 -ip 5220
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 2260 -ip 2260
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 744 -p 12804 -ip 12804
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 868 -p 2160 -ip 2160
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 2304 -ip 2304
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 5484 -ip 5484
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 11404 -ip 11404
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 984 -p 10148 -ip 10148
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 8832 -ip 8832
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 840 -p 8944 -ip 8944
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2160 -s 436
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5484 -s 488
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 12804 -s 400
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 908 -p 9056 -ip 9056
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 8832 -s 444
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 9500 -ip 9500
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 896 -p 8868 -ip 8868
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 9520 -ip 9520
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1004 -p 9700 -ip 9700
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 8896 -ip 8896
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1020 -p 9328 -ip 9328
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 896 -p 9292 -ip 9292
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 9108 -ip 9108
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 9552 -ip 9552
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 992 -p 8868 -ip 8868
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 928 -p 6232 -ip 6232
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 9500 -ip 9500
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 836 -p 8396 -ip 8396
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 728 -p 9360 -ip 9360
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 9100 -ip 9100
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 9056 -ip 9056
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 892 -p 9700 -ip 9700
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 8896 -ip 8896
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 996 -p 10076 -ip 10076
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 800 -p 8168 -ip 8168
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 924 -p 9520 -ip 9520
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 9328 -ip 9328
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 880 -p 6188 -ip 6188
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 8896 -s 440
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 5792 -ip 5792
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 660 -p 6068 -ip 6068
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 868 -p 9920 -ip 9920
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 976 -p 10028 -ip 10028
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 912 -p 9552 -ip 9552
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 896 -p 9636 -ip 9636
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 804 -p 9108 -ip 9108
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 660 -p 9292 -ip 9292
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 716 -p 10016 -ip 10016
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 9552 -s 392
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 912 -p 6232 -ip 6232
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 976 -p 9100 -ip 9100
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 984 -p 9360 -ip 9360
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1008 -p 8396 -ip 8396
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 996 -p 10076 -ip 10076
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 8168 -ip 8168
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 6188 -ip 6188
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 5792 -ip 5792
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 8396 -s 468
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 9920 -ip 9920
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 6068 -ip 6068
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 6188 -s 428
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 10028 -ip 10028
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 9636 -ip 9636
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 940 -p 10016 -ip 10016
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 812 -p 4312 -ip 4312
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 744 -p 4900 -ip 4900
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4312 -s 392
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4900 -s 452
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 5364 -ip 5364
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 5316 -ip 5316
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 840 -p 4312 -ip 4312
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5364 -s 464
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5316 -s 452
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4312 -s 392
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 4900 -ip 4900
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 840 -p 5532 -ip 5532
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4900 -s 388
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 820 -p 2320 -ip 2320
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1152 -ip 1152
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 828 -p 5532 -ip 5532
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 4904 -ip 4904
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 496 -p 3860 -ip 3860
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 904 -p 1540 -ip 1540
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 832 -p 4372 -ip 4372
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 992 -p 984 -ip 984
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 856 -p 2464 -ip 2464
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 2336 -ip 2336
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 1452 -ip 1452
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1016 -p 3628 -ip 3628
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 904 -p 2576 -ip 2576
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 828 -p 2624 -ip 2624
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 1588 -ip 1588
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 3940 -ip 3940
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 2320 -ip 2320
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 752 -p 1152 -ip 1152
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 792 -p 4716 -ip 4716
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 720 -p 1480 -ip 1480
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3632 -ip 3632
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 820 -p 2132 -ip 2132
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 2892 -ip 2892
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 4680 -ip 4680
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1272 -ip 1272
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2576 -s 440
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 772 -p 4684 -ip 4684
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 4904 -ip 4904
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3860 -ip 3860
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 836 -p 1540 -ip 1540
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 740 -p 4872 -ip 4872
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 940 -p 4372 -ip 4372
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 3972 -ip 3972
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 984 -ip 984
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2464 -ip 2464
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4872 -s 452
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 2336 -ip 2336
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3628 -ip 3628
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 856 -p 1452 -ip 1452
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3860 -s 444
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1588 -ip 1588
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 2624 -ip 2624
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 876 -p 5364 -ip 5364
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 4716 -ip 4716
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 960 -p 1480 -ip 1480
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1012 -p 3940 -ip 3940
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 956 -p 2132 -ip 2132
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 988 -p 9064 -ip 9064
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 820 -p 3632 -ip 3632
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 796 -p 1272 -ip 1272
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 2892 -ip 2892
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 944 -p 4680 -ip 4680
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 972 -p 8972 -ip 8972
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4684 -ip 4684
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 5316 -ip 5316
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 748 -p 9124 -ip 9124
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 752 -p 9584 -ip 9584
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 960 -p 3972 -ip 3972
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 728 -p 9260 -ip 9260
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 9676 -ip 9676
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 9544 -ip 9544
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4684 -s 436
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 740 -p 9964 -ip 9964
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 952 -p 8640 -ip 8640
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 908 -p 9064 -ip 9064
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 8972 -ip 8972
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 1004 -p 9584 -ip 9584
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 804 -p 9124 -ip 9124
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 940 -p 9676 -ip 9676
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 744 -p 9544 -ip 9544
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 9260 -ip 9260
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 728 -p 8640 -ip 8640
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 960 -p 9964 -ip 9964
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 2576 -ip 2576
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 9584 -s 468
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 8.8.8.8.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 104.219.191.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.214.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 20.160.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 232.168.11.51.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 50.23.12.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 171.39.242.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 83.210.23.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 11.227.111.52.in-addr.arpa | udp |
Files
C:\Users\Admin\AppData\Local\Temp\pUcC554.tmp
| MD5 | 3556a21c919e258b15cfe0d767456830 |
| SHA1 | 4966c45cdb2497332c10063a280189b25b16b438 |
| SHA256 | 30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04 |
| SHA512 | e8076d5319f3a04b105a46960b19aeed3002e60ce1d10f427f62f69ec14fafa340e739f20bf3abc82a62037a0e809738ead469327139b71ed5069740d40fbc43 |
C:\Users\Admin\AppData\Local\Temp\RCXC5D2.tmp
| MD5 | a59d6911d60622d899c42acbff58f9eb |
| SHA1 | f747ee40823ef996538867ce87f2b9b861fb512d |
| SHA256 | cee72d5baa0616137cc1f9b4f61bbaf54636df6ba638cb3580b357e724a0519c |
| SHA512 | bfffffe585cee0d0bb9cd00a1a8799c65524b940a57191a77d744c9498f4f31f7ad4c99c773f409c3e59264b20cf2c1c4e8a81a15966b6265d7273df857c0038 |
C:\Users\Admin\AppData\Local\Temp\RCXC5F4.tmp
| MD5 | be0116fd2af3f5ea4a702eaedc3682e7 |
| SHA1 | dabae6d22e11562b9e4003c110b465bdfcc1b138 |
| SHA256 | cf36eb5202b1457142f6498c96d96dc75b0d8f96ad4938b9600874f6ea1e82ed |
| SHA512 | ab75ea85992ccf8fa27189d4d9bd30ac72b8c4c42aa81c96b4c3d78deb0a07aaeababce1d552e471edb797513d46a27adf0e2fae31d26724976d5e8a65f193ee |
C:\Users\Admin\AppData\Local\Temp\RCXC605.tmp
| MD5 | b71ec2f8f2240b72a98bbfa7e21db3e4 |
| SHA1 | 592cab264a3090593c6d18a69150c810999d688d |
| SHA256 | a6de4491953430b1601e033c44e64721396bf78fc82cbc5966138ee5a9f8cced |
| SHA512 | 2d9e0490f4ed969460c5f3ab0aca6ec7a176558b1712b56ac6ba0685481e33548141350e3db8a843c006a45182712f4621357b535bc39c5b1ff8e9033654fb27 |
memory/6112-1252-0x0000000000400000-0x0000000000708000-memory.dmp
memory/6048-1253-0x0000000000400000-0x0000000000708000-memory.dmp
memory/5920-1256-0x0000000000400000-0x0000000000708000-memory.dmp
memory/5780-1263-0x0000000000400000-0x0000000000708000-memory.dmp
memory/5824-1264-0x0000000000400000-0x0000000000708000-memory.dmp
memory/6032-1266-0x0000000000400000-0x0000000000708000-memory.dmp
memory/6156-1268-0x0000000000400000-0x0000000000708000-memory.dmp
memory/6236-1269-0x0000000000400000-0x0000000000708000-memory.dmp
memory/6188-1267-0x0000000000400000-0x0000000000708000-memory.dmp
memory/6064-1265-0x0000000000400000-0x0000000000708000-memory.dmp
memory/2152-1302-0x0000000000400000-0x0000000000708000-memory.dmp
memory/5760-1600-0x0000000000400000-0x0000000000708000-memory.dmp
memory/6080-1510-0x0000000000400000-0x0000000000708000-memory.dmp
memory/6128-1599-0x0000000000400000-0x0000000000708000-memory.dmp
memory/5744-1260-0x0000000000400000-0x0000000000708000-memory.dmp
memory/5796-1262-0x0000000000400000-0x0000000000708000-memory.dmp
memory/5724-1261-0x0000000000400000-0x0000000000708000-memory.dmp
memory/6220-1259-0x0000000000400000-0x0000000000708000-memory.dmp
memory/6016-1258-0x0000000000400000-0x0000000000708000-memory.dmp
memory/6096-1257-0x0000000000400000-0x0000000000708000-memory.dmp
memory/6204-1255-0x0000000000400000-0x0000000000708000-memory.dmp
memory/5888-1254-0x0000000000400000-0x0000000000708000-memory.dmp
memory/3272-1919-0x0000000000400000-0x0000000000708000-memory.dmp
memory/5936-2077-0x0000000000400000-0x0000000000708000-memory.dmp
memory/8220-2078-0x0000000000400000-0x0000000000708000-memory.dmp
memory/5904-2079-0x0000000000400000-0x0000000000708000-memory.dmp
memory/8916-2082-0x0000000000400000-0x0000000000708000-memory.dmp
memory/8584-2083-0x0000000000400000-0x0000000000708000-memory.dmp
memory/8736-2081-0x0000000000400000-0x0000000000708000-memory.dmp
memory/8684-2080-0x0000000000400000-0x0000000000708000-memory.dmp
memory/9012-2076-0x0000000000400000-0x0000000000708000-memory.dmp
memory/5952-2075-0x0000000000400000-0x0000000000708000-memory.dmp
memory/5964-2037-0x0000000000400000-0x0000000000708000-memory.dmp
memory/6172-2074-0x0000000000400000-0x0000000000708000-memory.dmp
memory/1152-1918-0x0000000000400000-0x0000000000708000-memory.dmp
memory/4056-1915-0x0000000000400000-0x0000000000708000-memory.dmp
memory/5012-1913-0x0000000000400000-0x0000000000708000-memory.dmp
memory/4468-1912-0x0000000000400000-0x0000000000708000-memory.dmp
memory/4064-1906-0x0000000000400000-0x0000000000708000-memory.dmp
memory/1596-1905-0x0000000000400000-0x0000000000708000-memory.dmp
memory/3596-1904-0x0000000000400000-0x0000000000708000-memory.dmp
memory/5108-1903-0x0000000000400000-0x0000000000708000-memory.dmp
memory/1840-1901-0x0000000000400000-0x0000000000708000-memory.dmp
memory/1892-1900-0x0000000000400000-0x0000000000708000-memory.dmp
memory/3280-1894-0x0000000000400000-0x0000000000708000-memory.dmp
memory/1512-1893-0x0000000000400000-0x0000000000708000-memory.dmp
memory/2040-1889-0x0000000000400000-0x0000000000708000-memory.dmp
memory/4408-1887-0x0000000000400000-0x0000000000708000-memory.dmp
memory/5060-1883-0x0000000000400000-0x0000000000708000-memory.dmp
memory/3204-1879-0x0000000000400000-0x0000000000708000-memory.dmp
memory/2680-1878-0x0000000000400000-0x0000000000708000-memory.dmp
memory/4972-1877-0x0000000000400000-0x0000000000708000-memory.dmp
memory/3400-1873-0x0000000000400000-0x0000000000708000-memory.dmp
memory/1096-1865-0x0000000000400000-0x0000000000708000-memory.dmp
memory/3692-1864-0x0000000000400000-0x0000000000708000-memory.dmp
memory/2352-1863-0x0000000000400000-0x0000000000708000-memory.dmp
memory/3360-1854-0x0000000000400000-0x0000000000708000-memory.dmp
memory/2320-1917-0x0000000000400000-0x0000000000708000-memory.dmp
memory/3476-1910-0x0000000000400000-0x0000000000708000-memory.dmp
memory/4192-1902-0x0000000000400000-0x0000000000708000-memory.dmp
memory/2428-1892-0x0000000000400000-0x0000000000708000-memory.dmp
memory/396-1886-0x0000000000400000-0x0000000000708000-memory.dmp
memory/1960-1872-0x0000000000400000-0x0000000000708000-memory.dmp
memory/2380-1866-0x0000000000400000-0x0000000000708000-memory.dmp
C:\Users\Admin\AppData\Local\Temp\RCXFF38.tmp
| MD5 | f6b7641d230f031297861a5d11ca3d25 |
| SHA1 | 53e2faf73b2bb2af3c13396cf1050f3f3cbeb022 |
| SHA256 | 7506a232dd11142ae05bd8da8b48b690c052ed8b0fbd555991f6d347a6cbc223 |
| SHA512 | 8e5a8fd0e1ca63afbb679c6faddced0d83a3d391f095826278e8459554c5aeb51aad0b1d04c220cf6438563dc32637121d9fe9df29d6f964150acc9a707ba8cf |
C:\Users\Admin\AppData\Local\Temp\RCX7E77.tmp
| MD5 | 9f75a73e75071a9c66370f920fc1a0a1 |
| SHA1 | fd508cbbabd63dafb584a70100e6f657da5bcfb2 |
| SHA256 | b03af313c492b416219aaa73e6a316dc834e79758ffba02f1ccbbafe807e83ae |
| SHA512 | 74b71e08b40c4437ee180d5109ba76e8ecd5f86f820a9d284a8778956a064ed9b48d9bd157ad64cbe0c5caffb3ed9c3e6a66f8222c42df6878d6894b826d637e |
C:\Users\Admin\AppData\Local\Temp\RCX7E88.tmp
| MD5 | e8c6ae46588bf9ba53209db08903b410 |
| SHA1 | 9e4f321abd3817540bc8c4a439ebb01de79136b9 |
| SHA256 | cafbaec21648261ac81b264def8e860a4d7e287a80c71a16c6e3cc693d9b04dd |
| SHA512 | 1a683f547761067967af30b07beb0575125cb8bd1ec055a6847dc973a2b10dd7d6b5914db625921b28f964b90d5d742294f384e290b7680f2532e37b21f027f9 |
C:\Users\Admin\AppData\Local\Temp\RCX8F96.tmp
| MD5 | c0943cea394434f6a6d99885f5e25020 |
| SHA1 | f7447b8545f82abdbb510319ecba578a67343e0f |
| SHA256 | 58d613495c7755e63a7d4b0a80d8172d27e368ffb8737f6c9f2b223bf4c30b50 |
| SHA512 | f3a287cf0575c719d8cecd7061b76b5767096ed728b8128e82586fb6af0958cbb3a09e3009dd9f2458b0f00df929193d2c33b9ff2a1dcf10c63b648436165bea |
C:\Users\Admin\AppData\Local\Temp\RCX8F95.tmp
| MD5 | b6d69b13a719cf669d29606a1b213c1c |
| SHA1 | aff6725a572787e06e85bb17d88e2a4ffeadfc5a |
| SHA256 | da93922fba1bee8e76917b00127b15085c7f35a812130f6be8e0a78fb2482ee6 |
| SHA512 | e425d56424e9d469fcedd58febe61d6edca03697fd647da4116b9ecff3c4db9527316ee8973be35daa68c02bf9849e30fe5ed13508532cf04378e7022cfd693c |
C:\Program Files\7-Zip\Uninstall.exe
| MD5 | a81936a1bd45a509f571e85bc30610b7 |
| SHA1 | 0a24b0c5156b388dad759e6dbed6ca0f26de9f36 |
| SHA256 | cdf8f1674015283dbfdac05d1f3ff84cc25d4a627e4c6e9525be42fa17a64224 |
| SHA512 | d34771c0c9ab208388d8771acb43648104c550841e779dbd5e1a8c5c251aaf4fe0319ce3983b8aa2549efad15cc47e1bf9e7da518fdead7f44f1f9487ce894ec |
C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
| MD5 | b0dc753e51326b997140c1be4a04d9ab |
| SHA1 | 156aefa37f869a3bccd8502478fe3f07f75afca4 |
| SHA256 | 92dffbb5bd3bd609b2ac435a8d42071ae8235783ca75e69676ef2238a7b73496 |
| SHA512 | a05333c8dac717a0f839b83d6b09ac2853185695cd37591ee423206cd0ce2d597f9b7eaa15cf3c8d99efe2307f3991951d0373e5821443dc874ec134c44ccbc2 |
C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
| MD5 | 541072c78de9d027a4a637a92d541890 |
| SHA1 | cbbe7f4713de7e4a973f80f03da21bd139355280 |
| SHA256 | 8018c608ef815df839be2d99b0024f57eac089ea91759987e6d260d47d3a4942 |
| SHA512 | 185ee3c92c72aef925df026f4c97fdaed3bb4bfd944883275a051c28810c2e96eaa4b89fa6d57f955b34b835e961e04f78e53dfaf5d989a0551a2317191e19ca |
Analysis: behavioral1
Detonation Overview
Submitted
2024-11-08 12:55
Reported
2024-11-08 12:57
Platform
win7-20240903-en
Max time kernel
20s
Max time network
16s
Command Line
Signatures
Reads user/profile data of web browsers
Drops file in Program Files directory
| Description | Indicator | Process | Target |
| File opened for modification | C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe | C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7z.exe | C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7zFM.exe | C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\7zG.exe | C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe | N/A |
| File opened for modification | C:\Program Files\7-Zip\Uninstall.exe | C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe | N/A |
Program crash
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\WerFault.exe | C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe |
System Location Discovery: System Language Discovery
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe | N/A |
Suspicious use of WriteProcessMemory
| Description | Indicator | Process | Target |
| PID 2316 wrote to memory of 2280 | N/A | C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe | C:\Windows\SysWOW64\WerFault.exe |
| PID 2316 wrote to memory of 2280 | N/A | C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe | C:\Windows\SysWOW64\WerFault.exe |
| PID 2316 wrote to memory of 2280 | N/A | C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe | C:\Windows\SysWOW64\WerFault.exe |
| PID 2316 wrote to memory of 2280 | N/A | C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe | C:\Windows\SysWOW64\WerFault.exe |
Processes
C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2316 -s 156
Network
Files
memory/2316-0-0x0000000000400000-0x0000000000708000-memory.dmp