Malware Analysis Report

2025-08-11 07:45

Sample ID 241108-p5va9ssgln
Target 30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N
SHA256 30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04
Tags
discovery spyware stealer
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04

Threat Level: Shows suspicious behavior

The file 30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery spyware stealer

Reads user/profile data of web browsers

Drops file in Program Files directory

Unsigned PE

Program crash

System Location Discovery: System Language Discovery

Suspicious use of WriteProcessMemory

Suspicious behavior: EnumeratesProcesses

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-08 12:55

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-11-08 12:55

Reported

2024-11-08 12:57

Platform

win10v2004-20241007-en

Max time kernel

17s

Max time network

98s

Command Line

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

Signatures

Reads user/profile data of web browsers

spyware stealer

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2152 wrote to memory of 3360 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 2152 wrote to memory of 3360 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 2152 wrote to memory of 3360 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 3360 wrote to memory of 2352 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 3360 wrote to memory of 2352 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 3360 wrote to memory of 2352 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 2352 wrote to memory of 3692 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 2352 wrote to memory of 3692 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 2352 wrote to memory of 3692 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 3692 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 3692 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 3692 wrote to memory of 1096 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 1096 wrote to memory of 2380 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 1096 wrote to memory of 2380 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 1096 wrote to memory of 2380 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 2380 wrote to memory of 1960 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 2380 wrote to memory of 1960 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 2380 wrote to memory of 1960 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 1960 wrote to memory of 3400 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 1960 wrote to memory of 3400 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 1960 wrote to memory of 3400 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 3400 wrote to memory of 4972 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 3400 wrote to memory of 4972 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 3400 wrote to memory of 4972 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 4972 wrote to memory of 2680 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 4972 wrote to memory of 2680 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 4972 wrote to memory of 2680 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 2680 wrote to memory of 3204 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 2680 wrote to memory of 3204 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 2680 wrote to memory of 3204 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 3204 wrote to memory of 5060 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 3204 wrote to memory of 5060 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 3204 wrote to memory of 5060 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 5060 wrote to memory of 396 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 5060 wrote to memory of 396 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 5060 wrote to memory of 396 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 396 wrote to memory of 4408 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 396 wrote to memory of 4408 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 396 wrote to memory of 4408 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 4408 wrote to memory of 2040 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 4408 wrote to memory of 2040 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 4408 wrote to memory of 2040 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 2040 wrote to memory of 2428 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 2040 wrote to memory of 2428 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 2040 wrote to memory of 2428 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 2428 wrote to memory of 1512 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 2428 wrote to memory of 1512 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 2428 wrote to memory of 1512 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 1512 wrote to memory of 3280 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 1512 wrote to memory of 3280 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 1512 wrote to memory of 3280 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 3280 wrote to memory of 1892 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 3280 wrote to memory of 1892 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 3280 wrote to memory of 1892 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 1892 wrote to memory of 1840 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 1892 wrote to memory of 1840 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 1892 wrote to memory of 1840 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 1840 wrote to memory of 4192 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 1840 wrote to memory of 4192 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 1840 wrote to memory of 4192 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 4192 wrote to memory of 5108 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 4192 wrote to memory of 5108 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 4192 wrote to memory of 5108 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe
PID 5108 wrote to memory of 3596 N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

Processes

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 5760 -ip 5760

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 5888 -ip 5888

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 6080 -ip 6080

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 6096 -ip 6096

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 548 -p 6128 -ip 6128

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 6172 -ip 6172

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 6112 -ip 6112

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 6048 -ip 6048

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 5920 -ip 5920

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 6172 -s 428

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 6080 -s 468

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 6128 -s 448

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5760 -s 464

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 6016 -ip 6016

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 6220 -ip 6220

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 6204 -ip 6204

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 5796 -ip 5796

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 5724 -ip 5724

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 5780 -ip 5780

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 5744 -ip 5744

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 572 -p 5824 -ip 5824

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 708 -p 6064 -ip 6064

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 724 -p 6032 -ip 6032

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 744 -p 6188 -ip 6188

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 6156 -ip 6156

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 6236 -ip 6236

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 6112 -ip 6112

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 5888 -ip 5888

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 660 -p 6048 -ip 6048

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 6096 -ip 6096

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 760 -p 5920 -ip 5920

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 776 -p 6204 -ip 6204

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 6016 -ip 6016

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 796 -p 6220 -ip 6220

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 844 -p 5780 -ip 5780

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 5796 -ip 5796

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 5724 -ip 5724

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 5744 -ip 5744

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 764 -p 5824 -ip 5824

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 6032 -ip 6032

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 792 -p 6064 -ip 6064

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 740 -p 6188 -ip 6188

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 6156 -ip 6156

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 764 -p 6236 -ip 6236

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 768 -p 6080 -ip 6080

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 5760 -ip 5760

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 6128 -ip 6128

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 740 -p 6172 -ip 6172

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 6080 -s 468

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5760 -s 464

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 6128 -s 448

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 6172 -s 428

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 740 -p 5904 -ip 5904

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 804 -p 5964 -ip 5964

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 5904 -ip 5904

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 8584 -ip 8584

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5904 -s 444

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 5952 -ip 5952

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 496 -p 5964 -ip 5964

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 3520 -ip 3520

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 9272 -ip 9272

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 8584 -s 444

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 876 -p 5936 -ip 5936

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 8220 -ip 8220

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 716 -p 9012 -ip 9012

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 660 -p 8684 -ip 8684

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 8736 -ip 8736

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 764 -p 5952 -ip 5952

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 9272 -s 436

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 576 -p 8916 -ip 8916

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 3520 -s 456

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5936 -ip 5936

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 712 -p 9012 -ip 9012

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 8220 -ip 8220

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 660 -p 8736 -ip 8736

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 804 -p 8684 -ip 8684

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 8916 -ip 8916

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 8916 -s 428

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 8584 -ip 8584

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 8584 -s 444

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 9272 -ip 9272

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 3520 -ip 3520

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 9272 -s 436

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 3520 -s 456

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 804 -p 8476 -ip 8476

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 9352 -ip 9352

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 6000 -ip 6000

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 8904 -ip 8904

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 8476 -s 460

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 9352 -s 440

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 6000 -s 372

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 8904 -s 436

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 1904 -ip 1904

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4204 -ip 4204

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 1932 -ip 1932

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 4980 -ip 4980

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 548 -p 4860 -ip 4860

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 848 -p 3468 -ip 3468

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 4452 -ip 4452

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 4912 -ip 4912

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4876 -ip 4876

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 760 -p 1904 -ip 1904

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 884 -p 8628 -ip 8628

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 744 -p 5548 -ip 5548

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 560 -p 4204 -ip 4204

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 5188 -ip 5188

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 5268 -ip 5268

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 8476 -ip 8476

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4876 -s 396

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5188 -s 432

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 5596 -ip 5596

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 912 -p 5580 -ip 5580

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 5612 -ip 5612

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 5688 -ip 5688

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 888 -p 1932 -ip 1932

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 6000 -ip 6000

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 844 -p 4452 -ip 4452

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4980 -ip 4980

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 916 -p 4912 -ip 4912

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 8628 -ip 8628

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 760 -p 5548 -ip 5548

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5688 -s 444

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 792 -p 5268 -ip 5268

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1932 -s 476

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 3468 -ip 3468

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 944 -p 4860 -ip 4860

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 960 -p 9824 -ip 9824

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 5840 -ip 5840

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 8652 -ip 8652

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 800 -p 8836 -ip 8836

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 824 -p 5596 -ip 5596

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 5580 -ip 5580

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 5612 -ip 5612

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 944 -p 9352 -ip 9352

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 8904 -ip 8904

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 780 -p 9824 -ip 9824

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 840 -p 2924 -ip 2924

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 844 -p 5172 -ip 5172

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 716 -p 5840 -ip 5840

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 8652 -ip 8652

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 828 -p 8836 -ip 8836

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 560 -p 2924 -ip 2924

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 5172 -ip 5172

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 708 -p 5124 -ip 5124

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 964 -p 4876 -ip 4876

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 904 -p 5188 -ip 5188

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2924 -s 400

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 716 -p 5432 -ip 5432

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 5204 -ip 5204

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5172 -s 476

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 880 -p 5464 -ip 5464

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 924 -p 5124 -ip 5124

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4876 -s 396

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 832 -p 5688 -ip 5688

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 5984 -ip 5984

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 5432 -ip 5432

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5188 -s 432

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 5204 -ip 5204

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 5464 -ip 5464

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 2740 -ip 2740

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 804 -p 5984 -ip 5984

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 952 -p 8544 -ip 8544

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 2740 -ip 2740

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 5232 -ip 5232

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 5300 -ip 5300

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 916 -p 10148 -ip 10148

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 5284 -ip 5284

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 8832 -ip 8832

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 10148 -s 436

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 9992 -ip 9992

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 8544 -ip 8544

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 11600 -ip 11600

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 10168 -ip 10168

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 952 -p 9708 -ip 9708

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 944 -p 5500 -ip 5500

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 776 -p 10068 -ip 10068

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 8832 -s 444

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 728 -p 5516 -ip 5516

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 696 -p 9952 -ip 9952

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 8456 -ip 8456

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 11640 -ip 11640

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 896 -p 8944 -ip 8944

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 5672 -ip 5672

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 828 -p 5380 -ip 5380

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 860 -p 5232 -ip 5232

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 908 -p 5284 -ip 5284

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 8944 -s 392

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 800 -p 12436 -ip 12436

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 5300 -ip 5300

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 920 -p 12548 -ip 12548

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 5628 -ip 5628

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 12976 -ip 12976

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 876 -p 12372 -ip 12372

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 10232 -ip 10232

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 14064 -ip 14064

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 13000 -ip 13000

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 824 -p 13204 -ip 13204

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 776 -p 9992 -ip 9992

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 860 -p 12252 -ip 12252

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 11764 -ip 11764

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 11600 -ip 11600

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 832 -p 11492 -ip 11492

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 868 -p 12852 -ip 12852

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 828 -p 5220 -ip 5220

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 776 -p 9708 -ip 9708

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 2260 -ip 2260

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 892 -p 12804 -ip 12804

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 11404 -ip 11404

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 2160 -ip 2160

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 968 -p 2304 -ip 2304

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 10168 -ip 10168

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 10068 -ip 10068

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 5500 -ip 5500

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 9952 -ip 9952

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 844 -p 8456 -ip 8456

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 5516 -ip 5516

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 932 -p 11640 -ip 11640

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 5672 -ip 5672

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 5380 -ip 5380

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 704 -p 12436 -ip 12436

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 8456 -s 372

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 840 -p 12548 -ip 12548

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 916 -p 5484 -ip 5484

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 5628 -ip 5628

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 12976 -ip 12976

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 10232 -ip 10232

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 13000 -ip 13000

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 14064 -ip 14064

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 728 -p 12372 -ip 12372

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 696 -p 13204 -ip 13204

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 976 -p 11764 -ip 11764

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 820 -p 12252 -ip 12252

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 896 -p 11492 -ip 11492

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1016 -p 12852 -ip 12852

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 5220 -ip 5220

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 2260 -ip 2260

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 744 -p 12804 -ip 12804

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 868 -p 2160 -ip 2160

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 2304 -ip 2304

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 852 -p 5484 -ip 5484

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 11404 -ip 11404

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 984 -p 10148 -ip 10148

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 8832 -ip 8832

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 840 -p 8944 -ip 8944

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2160 -s 436

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5484 -s 488

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 12804 -s 400

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 908 -p 9056 -ip 9056

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 8832 -s 444

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 9500 -ip 9500

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 896 -p 8868 -ip 8868

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 9520 -ip 9520

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1004 -p 9700 -ip 9700

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 8896 -ip 8896

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1020 -p 9328 -ip 9328

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 896 -p 9292 -ip 9292

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 9108 -ip 9108

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 9552 -ip 9552

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 992 -p 8868 -ip 8868

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 928 -p 6232 -ip 6232

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 9500 -ip 9500

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 836 -p 8396 -ip 8396

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 728 -p 9360 -ip 9360

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 9100 -ip 9100

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 9056 -ip 9056

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 892 -p 9700 -ip 9700

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 8896 -ip 8896

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 996 -p 10076 -ip 10076

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 800 -p 8168 -ip 8168

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 924 -p 9520 -ip 9520

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 9328 -ip 9328

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 880 -p 6188 -ip 6188

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 8896 -s 440

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 5792 -ip 5792

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 660 -p 6068 -ip 6068

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 868 -p 9920 -ip 9920

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 976 -p 10028 -ip 10028

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 912 -p 9552 -ip 9552

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 896 -p 9636 -ip 9636

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 804 -p 9108 -ip 9108

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 660 -p 9292 -ip 9292

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 716 -p 10016 -ip 10016

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 9552 -s 392

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 912 -p 6232 -ip 6232

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 976 -p 9100 -ip 9100

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 984 -p 9360 -ip 9360

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1008 -p 8396 -ip 8396

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 996 -p 10076 -ip 10076

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 8168 -ip 8168

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 6188 -ip 6188

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 5792 -ip 5792

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 8396 -s 468

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 9920 -ip 9920

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 6068 -ip 6068

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 6188 -s 428

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 10028 -ip 10028

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 608 -p 9636 -ip 9636

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 940 -p 10016 -ip 10016

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 812 -p 4312 -ip 4312

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 744 -p 4900 -ip 4900

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4312 -s 392

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4900 -s 452

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 5364 -ip 5364

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 5316 -ip 5316

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 840 -p 4312 -ip 4312

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5364 -s 464

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5316 -s 452

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4312 -s 392

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 4900 -ip 4900

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 840 -p 5532 -ip 5532

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4900 -s 388

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 820 -p 2320 -ip 2320

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1152 -ip 1152

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 828 -p 5532 -ip 5532

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 4904 -ip 4904

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 496 -p 3860 -ip 3860

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 904 -p 1540 -ip 1540

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 832 -p 4372 -ip 4372

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 992 -p 984 -ip 984

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 856 -p 2464 -ip 2464

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 2336 -ip 2336

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 1452 -ip 1452

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1016 -p 3628 -ip 3628

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 904 -p 2576 -ip 2576

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 828 -p 2624 -ip 2624

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 1588 -ip 1588

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 3940 -ip 3940

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 2320 -ip 2320

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 752 -p 1152 -ip 1152

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 792 -p 4716 -ip 4716

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 720 -p 1480 -ip 1480

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3632 -ip 3632

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 820 -p 2132 -ip 2132

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 2892 -ip 2892

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 4680 -ip 4680

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1272 -ip 1272

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2576 -s 440

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 772 -p 4684 -ip 4684

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 4904 -ip 4904

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3860 -ip 3860

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 836 -p 1540 -ip 1540

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 740 -p 4872 -ip 4872

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 940 -p 4372 -ip 4372

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 3972 -ip 3972

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 984 -ip 984

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2464 -ip 2464

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4872 -s 452

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 2336 -ip 2336

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3628 -ip 3628

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 856 -p 1452 -ip 1452

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 3860 -s 444

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1588 -ip 1588

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 936 -p 2624 -ip 2624

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 876 -p 5364 -ip 5364

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 4716 -ip 4716

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 960 -p 1480 -ip 1480

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1012 -p 3940 -ip 3940

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 956 -p 2132 -ip 2132

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 988 -p 9064 -ip 9064

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 820 -p 3632 -ip 3632

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 796 -p 1272 -ip 1272

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 664 -p 2892 -ip 2892

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 944 -p 4680 -ip 4680

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 972 -p 8972 -ip 8972

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4684 -ip 4684

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 5316 -ip 5316

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 748 -p 9124 -ip 9124

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 752 -p 9584 -ip 9584

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 960 -p 3972 -ip 3972

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 728 -p 9260 -ip 9260

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 9676 -ip 9676

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 9544 -ip 9544

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4684 -s 436

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 740 -p 9964 -ip 9964

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 952 -p 8640 -ip 8640

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 908 -p 9064 -ip 9064

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 8972 -ip 8972

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1004 -p 9584 -ip 9584

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 804 -p 9124 -ip 9124

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 940 -p 9676 -ip 9676

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 744 -p 9544 -ip 9544

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 9260 -ip 9260

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 728 -p 8640 -ip 8640

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 960 -p 9964 -ip 9964

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 2576 -ip 2576

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 9584 -s 468

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 104.219.191.52.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 20.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
US 8.8.8.8:53 50.23.12.20.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 83.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 11.227.111.52.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Temp\pUcC554.tmp

MD5 3556a21c919e258b15cfe0d767456830
SHA1 4966c45cdb2497332c10063a280189b25b16b438
SHA256 30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04
SHA512 e8076d5319f3a04b105a46960b19aeed3002e60ce1d10f427f62f69ec14fafa340e739f20bf3abc82a62037a0e809738ead469327139b71ed5069740d40fbc43

C:\Users\Admin\AppData\Local\Temp\RCXC5D2.tmp

MD5 a59d6911d60622d899c42acbff58f9eb
SHA1 f747ee40823ef996538867ce87f2b9b861fb512d
SHA256 cee72d5baa0616137cc1f9b4f61bbaf54636df6ba638cb3580b357e724a0519c
SHA512 bfffffe585cee0d0bb9cd00a1a8799c65524b940a57191a77d744c9498f4f31f7ad4c99c773f409c3e59264b20cf2c1c4e8a81a15966b6265d7273df857c0038

C:\Users\Admin\AppData\Local\Temp\RCXC5F4.tmp

MD5 be0116fd2af3f5ea4a702eaedc3682e7
SHA1 dabae6d22e11562b9e4003c110b465bdfcc1b138
SHA256 cf36eb5202b1457142f6498c96d96dc75b0d8f96ad4938b9600874f6ea1e82ed
SHA512 ab75ea85992ccf8fa27189d4d9bd30ac72b8c4c42aa81c96b4c3d78deb0a07aaeababce1d552e471edb797513d46a27adf0e2fae31d26724976d5e8a65f193ee

C:\Users\Admin\AppData\Local\Temp\RCXC605.tmp

MD5 b71ec2f8f2240b72a98bbfa7e21db3e4
SHA1 592cab264a3090593c6d18a69150c810999d688d
SHA256 a6de4491953430b1601e033c44e64721396bf78fc82cbc5966138ee5a9f8cced
SHA512 2d9e0490f4ed969460c5f3ab0aca6ec7a176558b1712b56ac6ba0685481e33548141350e3db8a843c006a45182712f4621357b535bc39c5b1ff8e9033654fb27

memory/6112-1252-0x0000000000400000-0x0000000000708000-memory.dmp

memory/6048-1253-0x0000000000400000-0x0000000000708000-memory.dmp

memory/5920-1256-0x0000000000400000-0x0000000000708000-memory.dmp

memory/5780-1263-0x0000000000400000-0x0000000000708000-memory.dmp

memory/5824-1264-0x0000000000400000-0x0000000000708000-memory.dmp

memory/6032-1266-0x0000000000400000-0x0000000000708000-memory.dmp

memory/6156-1268-0x0000000000400000-0x0000000000708000-memory.dmp

memory/6236-1269-0x0000000000400000-0x0000000000708000-memory.dmp

memory/6188-1267-0x0000000000400000-0x0000000000708000-memory.dmp

memory/6064-1265-0x0000000000400000-0x0000000000708000-memory.dmp

memory/2152-1302-0x0000000000400000-0x0000000000708000-memory.dmp

memory/5760-1600-0x0000000000400000-0x0000000000708000-memory.dmp

memory/6080-1510-0x0000000000400000-0x0000000000708000-memory.dmp

memory/6128-1599-0x0000000000400000-0x0000000000708000-memory.dmp

memory/5744-1260-0x0000000000400000-0x0000000000708000-memory.dmp

memory/5796-1262-0x0000000000400000-0x0000000000708000-memory.dmp

memory/5724-1261-0x0000000000400000-0x0000000000708000-memory.dmp

memory/6220-1259-0x0000000000400000-0x0000000000708000-memory.dmp

memory/6016-1258-0x0000000000400000-0x0000000000708000-memory.dmp

memory/6096-1257-0x0000000000400000-0x0000000000708000-memory.dmp

memory/6204-1255-0x0000000000400000-0x0000000000708000-memory.dmp

memory/5888-1254-0x0000000000400000-0x0000000000708000-memory.dmp

memory/3272-1919-0x0000000000400000-0x0000000000708000-memory.dmp

memory/5936-2077-0x0000000000400000-0x0000000000708000-memory.dmp

memory/8220-2078-0x0000000000400000-0x0000000000708000-memory.dmp

memory/5904-2079-0x0000000000400000-0x0000000000708000-memory.dmp

memory/8916-2082-0x0000000000400000-0x0000000000708000-memory.dmp

memory/8584-2083-0x0000000000400000-0x0000000000708000-memory.dmp

memory/8736-2081-0x0000000000400000-0x0000000000708000-memory.dmp

memory/8684-2080-0x0000000000400000-0x0000000000708000-memory.dmp

memory/9012-2076-0x0000000000400000-0x0000000000708000-memory.dmp

memory/5952-2075-0x0000000000400000-0x0000000000708000-memory.dmp

memory/5964-2037-0x0000000000400000-0x0000000000708000-memory.dmp

memory/6172-2074-0x0000000000400000-0x0000000000708000-memory.dmp

memory/1152-1918-0x0000000000400000-0x0000000000708000-memory.dmp

memory/4056-1915-0x0000000000400000-0x0000000000708000-memory.dmp

memory/5012-1913-0x0000000000400000-0x0000000000708000-memory.dmp

memory/4468-1912-0x0000000000400000-0x0000000000708000-memory.dmp

memory/4064-1906-0x0000000000400000-0x0000000000708000-memory.dmp

memory/1596-1905-0x0000000000400000-0x0000000000708000-memory.dmp

memory/3596-1904-0x0000000000400000-0x0000000000708000-memory.dmp

memory/5108-1903-0x0000000000400000-0x0000000000708000-memory.dmp

memory/1840-1901-0x0000000000400000-0x0000000000708000-memory.dmp

memory/1892-1900-0x0000000000400000-0x0000000000708000-memory.dmp

memory/3280-1894-0x0000000000400000-0x0000000000708000-memory.dmp

memory/1512-1893-0x0000000000400000-0x0000000000708000-memory.dmp

memory/2040-1889-0x0000000000400000-0x0000000000708000-memory.dmp

memory/4408-1887-0x0000000000400000-0x0000000000708000-memory.dmp

memory/5060-1883-0x0000000000400000-0x0000000000708000-memory.dmp

memory/3204-1879-0x0000000000400000-0x0000000000708000-memory.dmp

memory/2680-1878-0x0000000000400000-0x0000000000708000-memory.dmp

memory/4972-1877-0x0000000000400000-0x0000000000708000-memory.dmp

memory/3400-1873-0x0000000000400000-0x0000000000708000-memory.dmp

memory/1096-1865-0x0000000000400000-0x0000000000708000-memory.dmp

memory/3692-1864-0x0000000000400000-0x0000000000708000-memory.dmp

memory/2352-1863-0x0000000000400000-0x0000000000708000-memory.dmp

memory/3360-1854-0x0000000000400000-0x0000000000708000-memory.dmp

memory/2320-1917-0x0000000000400000-0x0000000000708000-memory.dmp

memory/3476-1910-0x0000000000400000-0x0000000000708000-memory.dmp

memory/4192-1902-0x0000000000400000-0x0000000000708000-memory.dmp

memory/2428-1892-0x0000000000400000-0x0000000000708000-memory.dmp

memory/396-1886-0x0000000000400000-0x0000000000708000-memory.dmp

memory/1960-1872-0x0000000000400000-0x0000000000708000-memory.dmp

memory/2380-1866-0x0000000000400000-0x0000000000708000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\RCXFF38.tmp

MD5 f6b7641d230f031297861a5d11ca3d25
SHA1 53e2faf73b2bb2af3c13396cf1050f3f3cbeb022
SHA256 7506a232dd11142ae05bd8da8b48b690c052ed8b0fbd555991f6d347a6cbc223
SHA512 8e5a8fd0e1ca63afbb679c6faddced0d83a3d391f095826278e8459554c5aeb51aad0b1d04c220cf6438563dc32637121d9fe9df29d6f964150acc9a707ba8cf

C:\Users\Admin\AppData\Local\Temp\RCX7E77.tmp

MD5 9f75a73e75071a9c66370f920fc1a0a1
SHA1 fd508cbbabd63dafb584a70100e6f657da5bcfb2
SHA256 b03af313c492b416219aaa73e6a316dc834e79758ffba02f1ccbbafe807e83ae
SHA512 74b71e08b40c4437ee180d5109ba76e8ecd5f86f820a9d284a8778956a064ed9b48d9bd157ad64cbe0c5caffb3ed9c3e6a66f8222c42df6878d6894b826d637e

C:\Users\Admin\AppData\Local\Temp\RCX7E88.tmp

MD5 e8c6ae46588bf9ba53209db08903b410
SHA1 9e4f321abd3817540bc8c4a439ebb01de79136b9
SHA256 cafbaec21648261ac81b264def8e860a4d7e287a80c71a16c6e3cc693d9b04dd
SHA512 1a683f547761067967af30b07beb0575125cb8bd1ec055a6847dc973a2b10dd7d6b5914db625921b28f964b90d5d742294f384e290b7680f2532e37b21f027f9

C:\Users\Admin\AppData\Local\Temp\RCX8F96.tmp

MD5 c0943cea394434f6a6d99885f5e25020
SHA1 f7447b8545f82abdbb510319ecba578a67343e0f
SHA256 58d613495c7755e63a7d4b0a80d8172d27e368ffb8737f6c9f2b223bf4c30b50
SHA512 f3a287cf0575c719d8cecd7061b76b5767096ed728b8128e82586fb6af0958cbb3a09e3009dd9f2458b0f00df929193d2c33b9ff2a1dcf10c63b648436165bea

C:\Users\Admin\AppData\Local\Temp\RCX8F95.tmp

MD5 b6d69b13a719cf669d29606a1b213c1c
SHA1 aff6725a572787e06e85bb17d88e2a4ffeadfc5a
SHA256 da93922fba1bee8e76917b00127b15085c7f35a812130f6be8e0a78fb2482ee6
SHA512 e425d56424e9d469fcedd58febe61d6edca03697fd647da4116b9ecff3c4db9527316ee8973be35daa68c02bf9849e30fe5ed13508532cf04378e7022cfd693c

C:\Program Files\7-Zip\Uninstall.exe

MD5 a81936a1bd45a509f571e85bc30610b7
SHA1 0a24b0c5156b388dad759e6dbed6ca0f26de9f36
SHA256 cdf8f1674015283dbfdac05d1f3ff84cc25d4a627e4c6e9525be42fa17a64224
SHA512 d34771c0c9ab208388d8771acb43648104c550841e779dbd5e1a8c5c251aaf4fe0319ce3983b8aa2549efad15cc47e1bf9e7da518fdead7f44f1f9487ce894ec

C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

MD5 b0dc753e51326b997140c1be4a04d9ab
SHA1 156aefa37f869a3bccd8502478fe3f07f75afca4
SHA256 92dffbb5bd3bd609b2ac435a8d42071ae8235783ca75e69676ef2238a7b73496
SHA512 a05333c8dac717a0f839b83d6b09ac2853185695cd37591ee423206cd0ce2d597f9b7eaa15cf3c8d99efe2307f3991951d0373e5821443dc874ec134c44ccbc2

C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

MD5 541072c78de9d027a4a637a92d541890
SHA1 cbbe7f4713de7e4a973f80f03da21bd139355280
SHA256 8018c608ef815df839be2d99b0024f57eac089ea91759987e6d260d47d3a4942
SHA512 185ee3c92c72aef925df026f4c97fdaed3bb4bfd944883275a051c28810c2e96eaa4b89fa6d57f955b34b835e961e04f78e53dfaf5d989a0551a2317191e19ca

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-08 12:55

Reported

2024-11-08 12:57

Platform

win7-20240903-en

Max time kernel

20s

Max time network

16s

Command Line

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

Signatures

Reads user/profile data of web browsers

spyware stealer

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe

"C:\Users\Admin\AppData\Local\Temp\30f800c78aade26b39b433ff196b851126cd063f63c7f2c26aa9f1a5755ece04N.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2316 -s 156

Network

N/A

Files

memory/2316-0-0x0000000000400000-0x0000000000708000-memory.dmp