Malware Analysis Report

2025-08-05 10:58

Sample ID 241109-ababnssjgt
Target 737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26
SHA256 737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26
Tags
discovery spyware stealer
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26

Threat Level: Shows suspicious behavior

The file 737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26 was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery spyware stealer

Reads user/profile data of web browsers

Drops file in Program Files directory

Unsigned PE

Program crash

System Location Discovery: System Language Discovery

Suspicious use of WriteProcessMemory

Suspicious behavior: EnumeratesProcesses

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-09 00:01

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-09 00:01

Reported

2024-11-09 00:04

Platform

win7-20240708-en

Max time kernel

117s

Max time network

118s

Command Line

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

Signatures

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1292 -s 156

Network

N/A

Files

memory/1292-0-0x0000000000400000-0x000000000048F000-memory.dmp

memory/1292-1-0x0000000000400000-0x000000000048F000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-11-09 00:01

Reported

2024-11-09 00:04

Platform

win10v2004-20241007-en

Max time kernel

33s

Max time network

151s

Command Line

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

Signatures

Reads user/profile data of web browsers

spyware stealer

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\7zFM.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Internet Explorer\ExtExport.exe N/A N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe N/A N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\7zG.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\7-Zip\7z.exe N/A N/A
File opened for modification C:\Program Files\Internet Explorer\ExtExport.exe N/A N/A
File opened for modification C:\Program Files\7-Zip\Uninstall.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A N/A
N/A N/A N/A
N/A N/A N/A
N/A N/A N/A
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
N/A N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language N/A N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language N/A N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language N/A N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language N/A N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language N/A N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language N/A N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language N/A N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language N/A N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language N/A N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language N/A N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language N/A N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language N/A N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 784 wrote to memory of 2692 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 784 wrote to memory of 2692 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 784 wrote to memory of 2692 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 2692 wrote to memory of 4796 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 2692 wrote to memory of 4796 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 2692 wrote to memory of 4796 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 4796 wrote to memory of 4092 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 4796 wrote to memory of 4092 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 4796 wrote to memory of 4092 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 4092 wrote to memory of 3456 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 4092 wrote to memory of 3456 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 4092 wrote to memory of 3456 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3456 wrote to memory of 3064 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3456 wrote to memory of 3064 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3456 wrote to memory of 3064 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3064 wrote to memory of 5016 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3064 wrote to memory of 5016 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3064 wrote to memory of 5016 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 5016 wrote to memory of 4664 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 5016 wrote to memory of 4664 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 5016 wrote to memory of 4664 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 4664 wrote to memory of 700 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 4664 wrote to memory of 700 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 4664 wrote to memory of 700 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 700 wrote to memory of 4720 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 700 wrote to memory of 4720 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 700 wrote to memory of 4720 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 4720 wrote to memory of 1416 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 4720 wrote to memory of 1416 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 4720 wrote to memory of 1416 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 1416 wrote to memory of 3068 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 1416 wrote to memory of 3068 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 1416 wrote to memory of 3068 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3068 wrote to memory of 2324 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3068 wrote to memory of 2324 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3068 wrote to memory of 2324 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 2324 wrote to memory of 4580 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 2324 wrote to memory of 4580 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 2324 wrote to memory of 4580 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 4580 wrote to memory of 3404 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 4580 wrote to memory of 3404 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 4580 wrote to memory of 3404 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3404 wrote to memory of 4152 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3404 wrote to memory of 4152 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3404 wrote to memory of 4152 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 4152 wrote to memory of 3012 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 4152 wrote to memory of 3012 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 4152 wrote to memory of 3012 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3012 wrote to memory of 3644 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3012 wrote to memory of 3644 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3012 wrote to memory of 3644 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3644 wrote to memory of 3260 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3644 wrote to memory of 3260 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3644 wrote to memory of 3260 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3260 wrote to memory of 2768 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3260 wrote to memory of 2768 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 3260 wrote to memory of 2768 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 2768 wrote to memory of 1904 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 2768 wrote to memory of 1904 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 2768 wrote to memory of 1904 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 1904 wrote to memory of 2500 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 1904 wrote to memory of 2500 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 1904 wrote to memory of 2500 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe
PID 2500 wrote to memory of 2224 N/A C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

Processes

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4720 -ip 4720

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 556 -p 1416 -ip 1416

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 3260 -ip 3260

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 584 -p 2768 -ip 2768

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 588 -p 3012 -ip 3012

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 620 -p 5032 -ip 5032

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 2480 -ip 2480

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 3716 -ip 3716

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 636 -p 2224 -ip 2224

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 656 -p 5072 -ip 5072

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 668 -p 3712 -ip 3712

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 680 -p 1868 -ip 1868

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 704 -p 3404 -ip 3404

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 692 -p 2500 -ip 2500

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 728 -p 5016 -ip 5016

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 716 -p 1904 -ip 1904

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 748 -p 4664 -ip 4664

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 788 -p 4580 -ip 4580

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1868 -s 444

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 752 -p 4152 -ip 4152

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 800 -p 1032 -ip 1032

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5016 -s 444

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 3716 -s 444

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2768 -s 444

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 3644 -ip 3644

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 792 -p 2324 -ip 2324

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 780 -p 4092 -ip 4092

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 696 -p 3068 -ip 3068

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 4796 -ip 4796

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 576 -p 3064 -ip 3064

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 2692 -ip 2692

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 784 -ip 784

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 588 -p 3456 -ip 3456

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 4640 -ip 4640

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 3788 -ip 3788

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 712 -p 1632 -ip 1632

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4460 -ip 4460

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 1828 -ip 1828

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 752 -p 4916 -ip 4916

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 624 -p 3828 -ip 3828

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 1936 -ip 1936

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 776 -p 2312 -ip 2312

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 3712 -ip 3712

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 872 -p 4720 -ip 4720

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 588 -p 3012 -ip 3012

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 2480 -ip 2480

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 912 -p 5032 -ip 5032

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 924 -p 4580 -ip 4580

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 948 -p 1416 -ip 1416

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 3260 -ip 3260

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 988 -p 1904 -ip 1904

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 4664 -ip 4664

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 3404 -ip 3404

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 616 -p 5072 -ip 5072

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 968 -p 1032 -ip 1032

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1000 -p 4152 -ip 4152

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2500 -ip 2500

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 948 -p 2224 -ip 2224

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 3068 -ip 3068

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 996 -p 4092 -ip 4092

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 604 -p 4796 -ip 4796

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 704 -p 2324 -ip 2324

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 736 -p 2692 -ip 2692

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 972 -p 3644 -ip 3644

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 696 -p 3064 -ip 3064

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 672 -p 3456 -ip 3456

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 4916 -ip 4916

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 684 -p 3788 -ip 3788

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 596 -p 1828 -ip 1828

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4640 -ip 4640

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 600 -p 1936 -ip 1936

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 560 -p 3828 -ip 3828

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 920 -p 784 -ip 784

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1036 -p 4460 -ip 4460

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1100 -p 1632 -ip 1632

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 2312 -ip 2312

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 872 -p 2768 -ip 2768

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 5016 -ip 5016

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2312 -s 432

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 3716 -ip 3716

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1032 -p 1868 -ip 1868

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2768 -s 444

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5016 -s 444

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 3716 -s 400

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 8652 -ip 8652

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 9348 -ip 9348

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1056 -p 8652 -ip 8652

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 9540 -ip 9540

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 792 -p 9924 -ip 9924

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1092 -p 9624 -ip 9624

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 8652 -s 436

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 9732 -ip 9732

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 496 -p 9768 -ip 9768

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 756 -p 9348 -ip 9348

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 920 -p 9540 -ip 9540

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 488 -p 9624 -ip 9624

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 9924 -ip 9924

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 9876 -ip 9876

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 9824 -ip 9824

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 588 -p 9732 -ip 9732

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 8332 -ip 8332

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 11008 -ip 11008

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 9624 -s 132

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 720 -p 10152 -ip 10152

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 9348 -s 388

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 8072 -ip 8072

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 592 -p 10020 -ip 10020

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 732 -p 10108 -ip 10108

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 9768 -ip 9768

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 8332 -s 392

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 972 -p 9956 -ip 9956

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1016 -p 9876 -ip 9876

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 724 -p 9824 -ip 9824

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1084 -p 11008 -ip 11008

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 10152 -ip 10152

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 776 -p 8072 -ip 8072

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 792 -p 10020 -ip 10020

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 10152 -s 444

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 10108 -ip 10108

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 964 -p 9956 -ip 9956

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 8332 -ip 8332

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 8332 -s 392

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1040 -p 1932 -ip 1932

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 948 -p 4484 -ip 4484

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1008 -p 5136 -ip 5136

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 920 -p 2688 -ip 2688

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1088 -p 4500 -ip 4500

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 732 -p 5152 -ip 5152

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 944 -p 5184 -ip 5184

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4484 -s 432

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 856 -p 5428 -ip 5428

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 2520 -ip 2520

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 5248 -ip 5248

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1132 -p 5380 -ip 5380

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 5284 -ip 5284

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 632 -p 5216 -ip 5216

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 948 -p 5300 -ip 5300

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1932 -s 400

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5136 -s 436

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5152 -s 396

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 736 -p 5332 -ip 5332

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 5268 -ip 5268

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 5412 -ip 5412

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 920 -p 5232 -ip 5232

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1032 -p 5640 -ip 5640

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 704 -p 5476 -ip 5476

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 5168 -ip 5168

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 488 -p 5624 -ip 5624

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1096 -p 5348 -ip 5348

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 5200 -ip 5200

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 5396 -ip 5396

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5316 -ip 5316

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 5508 -ip 5508

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1112 -p 5492 -ip 5492

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 972 -p 5460 -ip 5460

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 5444 -ip 5444

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1136 -p 5364 -ip 5364

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 892 -p 5656 -ip 5656

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 704 -p 5836 -ip 5836

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1088 -p 5768 -ip 5768

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 900 -p 5736 -ip 5736

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 6100 -ip 6100

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 5868 -ip 5868

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 5720 -ip 5720

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 944 -p 5588 -ip 5588

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 996 -p 5604 -ip 5604

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 5888 -ip 5888

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 732 -p 5920 -ip 5920

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 924 -p 5904 -ip 5904

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 5556 -ip 5556

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 920 -p 5524 -ip 5524

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 736 -p 5984 -ip 5984

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 672 -p 5540 -ip 5540

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 612 -p 5816 -ip 5816

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1148 -p 5704 -ip 5704

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1104 -p 5852 -ip 5852

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 944 -p 5688 -ip 5688

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 580 -p 5572 -ip 5572

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1056 -p 5672 -ip 5672

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 5752 -ip 5752

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 564 -p 6016 -ip 6016

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 888 -p 6004 -ip 6004

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 900 -p 5936 -ip 5936

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1096 -p 6052 -ip 6052

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 556 -p 5952 -ip 5952

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 6032 -ip 6032

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5784 -ip 5784

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1144 -p 6068 -ip 6068

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1032 -p 5968 -ip 5968

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 996 -p 6084 -ip 6084

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1156 -p 4500 -ip 4500

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1172 -p 5380 -ip 5380

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1196 -p 2688 -ip 2688

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1204 -p 5184 -ip 5184

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 556 -p 5428 -ip 5428

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 5284 -ip 5284

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 2520 -ip 2520

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 5248 -ip 5248

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1164 -p 5216 -ip 5216

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1072 -p 5412 -ip 5412

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1060 -p 5476 -ip 5476

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1088 -p 5300 -ip 5300

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1200 -p 5200 -ip 5200

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 5316 -ip 5316

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 772 -p 5268 -ip 5268

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 864 -p 5444 -ip 5444

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 948 -p 5492 -ip 5492

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1156 -p 5168 -ip 5168

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 5332 -ip 5332

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 5396 -ip 5396

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 908 -p 5232 -ip 5232

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 5624 -ip 5624

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1008 -p 5736 -ip 5736

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 840 -p 5640 -ip 5640

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1212 -p 5656 -ip 5656

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 644 -p 5588 -ip 5588

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 5836 -ip 5836

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1112 -p 5604 -ip 5604

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 996 -p 6100 -ip 6100

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1132 -p 5508 -ip 5508

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1188 -p 5364 -ip 5364

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 5460 -ip 5460

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1200 -p 5888 -ip 5888

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 892 -p 5904 -ip 5904

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1208 -p 5524 -ip 5524

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 668 -p 5984 -ip 5984

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 5540 -ip 5540

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 952 -p 5868 -ip 5868

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 972 -p 5768 -ip 5768

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1164 -p 5556 -ip 5556

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 920 -p 5720 -ip 5720

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 648 -p 5348 -ip 5348

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 712 -p 5920 -ip 5920

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 948 -p 5752 -ip 5752

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1128 -p 5672 -ip 5672

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1184 -p 5688 -ip 5688

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 5816 -ip 5816

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 5572 -ip 5572

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 6004 -ip 6004

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 5852 -ip 5852

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1132 -p 5704 -ip 5704

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1008 -p 6032 -ip 6032

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 704 -p 5936 -ip 5936

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 560 -p 6016 -ip 6016

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1128 -p 5952 -ip 5952

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1144 -p 6052 -ip 6052

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 660 -p 5784 -ip 5784

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1204 -p 5968 -ip 5968

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 740 -p 6068 -ip 6068

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 7604 -ip 7604

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 10572 -ip 10572

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1100 -p 10504 -ip 10504

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1208 -p 10628 -ip 10628

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 816 -p 10692 -ip 10692

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5968 -s 396

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 700 -p 11088 -ip 11088

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 984 -p 11660 -ip 11660

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 784 -p 12192 -ip 12192

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 840 -p 11980 -ip 11980

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1060 -p 12028 -ip 12028

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 10504 -s 388

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 11352 -ip 11352

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1144 -p 9008 -ip 9008

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 776 -p 5136 -ip 5136

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 10628 -s 436

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 10692 -s 448

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 904 -p 5152 -ip 5152

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 1932 -ip 1932

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 944 -p 9292 -ip 9292

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 668 -p 4484 -ip 4484

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 980 -p 10168 -ip 10168

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1180 -p 9792 -ip 9792

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1176 -p 10572 -ip 10572

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 628 -p 7604 -ip 7604

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1060 -p 11088 -ip 11088

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 776 -p 12192 -ip 12192

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1144 -p 9008 -ip 9008

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1212 -p 11660 -ip 11660

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 724 -p 11352 -ip 11352

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 880 -p 12028 -ip 12028

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 11980 -ip 11980

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 572 -p 9792 -ip 9792

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1204 -p 10168 -ip 10168

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 856 -p 9292 -ip 9292

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 12028 -s 392

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1180 -p 10692 -ip 10692

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 10168 -s 432

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 972 -p 10504 -ip 10504

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 9292 -s 448

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1204 -p 10628 -ip 10628

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 10504 -s 388

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1004 -p 8976 -ip 8976

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 8976 -s 440

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 560 -p 8976 -ip 8976

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 8976 -s 484

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 752 -p 15100 -ip 15100

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 15100 -s 440

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 15100 -ip 15100

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 15100 -s 460

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 752 -p 15032 -ip 15032

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 15032 -s 436

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 752 -p 15032 -ip 15032

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 15032 -s 436

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 1820 -ip 1820

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1820 -s 444

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 1820 -ip 1820

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1820 -s 444

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 5800 -ip 5800

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5800 -s 428

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 888 -p 5800 -ip 5800

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5800 -s 428

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1032 -p 2188 -ip 2188

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2188 -s 432

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 880 -p 2188 -ip 2188

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2188 -s 432

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 928 -p 16132 -ip 16132

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 16132 -s 440

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 928 -p 16132 -ip 16132

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 16132 -s 440

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 8428 -ip 8428

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 8428 -s 432

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 8428 -ip 8428

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 8428 -s 432

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1156 -p 14748 -ip 14748

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 14748 -s 400

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5512 -ip 5512

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 572 -p 14944 -ip 14944

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5512 -s 432

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 14944 -s 440

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 880 -p 5468 -ip 5468

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1144 -p 15128 -ip 15128

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 15076 -ip 15076

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 1128 -p 12672 -ip 12672

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 696 -p 15248 -ip 15248

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 752 -p 14956 -ip 14956

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 904 -p 15144 -ip 15144

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 15128 -s 448

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 736 -p 15308 -ip 15308

C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe

"C:\Users\Admin\AppData\Local\Temp\737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 5380 -ip 5380

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 984 -p 15068 -ip 15068

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 5468 -s 192

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 700 -p 5916 -ip 5916

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 104.219.191.52.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 76.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 56.163.245.4.in-addr.arpa udp
US 8.8.8.8:53 241.42.69.40.in-addr.arpa udp
US 8.8.8.8:53 100.208.201.84.in-addr.arpa udp
US 8.8.8.8:53 83.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 23.236.111.52.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Temp\pUc8ABC.tmp

MD5 ee63a57d9661333ab9aeb991d7002d83
SHA1 d8843c6127b0618c2ebba205238831bab4b1bd5c
SHA256 737d002a7c530ff934842f53bd874e33a22040efe12180e36a66ba887041dc26
SHA512 6b3e0b6763d78a8a8f7840725fbe135304f9c1430f66c80263a7bbac743429b47eeeca2aa2c6719f415eeadfade3916a57db381e0a39c33abdb475127af1c427

C:\Users\Admin\AppData\Local\Temp\RCX8AEE.tmp

MD5 5926a9d889860c2e39f41b500ac76128
SHA1 8ffc8d5df291e8b0becb17c22301c410f600d008
SHA256 dedd9e938e7b9e7badddef20331e894a6e23b16979eca9b8e395e91a653d8e0a
SHA512 147357dd3aa49b27b631b0e10ccd60a17f51f8664c2560edba4878f96f28d87c636cae3bed794289c4b28b1cb6a749a95e86c7559134425e5b18e16966496e65

C:\Users\Admin\AppData\Local\Temp\RCX8B92.tmp

MD5 729799189d92d89df20616b0f7fd7618
SHA1 8ffb2d5b1ab352e99e745e8a802e924d0c9d1c6b
SHA256 d7d66e3400c1ae377265207aafaf129cf0943bf6d68a77a721043d4f0741abdc
SHA512 1c93a6c94adbd5b37b9f90d2f9c3ca62179986d03a1b9abbc15386148be7296aa15548ef4d176fdaa470a4e18bc3603f74a36c39379d2bb3b41f0e36899f3fe2

C:\Users\Admin\AppData\Local\Temp\RCX8ADD.tmp

MD5 4f7ad2edb38b9217cb101585f99fd78f
SHA1 de362bf26dea96ce09cfd3d5c30dccc3d222b5f5
SHA256 e61a5764fe248b19885343a1d193ad53ed718ed51f79e5d15160b97d810793d8
SHA512 62ef02d7dbe48527b986c16e4643ebd6fd234f2e6d371b08fcaf70d9e6da2cc7bee32474b75c319888e6849606f2b88264d0f1bf15eeca7c75f7a1a04ae30b2b

memory/3712-1887-0x0000000000400000-0x000000000048F000-memory.dmp

memory/4580-1888-0x0000000000400000-0x000000000048F000-memory.dmp

memory/2480-1891-0x0000000000400000-0x000000000048F000-memory.dmp

memory/1904-1895-0x0000000000400000-0x000000000048F000-memory.dmp

memory/5072-1897-0x0000000000400000-0x000000000048F000-memory.dmp

memory/1032-1902-0x0000000000400000-0x000000000048F000-memory.dmp

memory/2224-1901-0x0000000000400000-0x000000000048F000-memory.dmp

memory/2500-1900-0x0000000000400000-0x000000000048F000-memory.dmp

memory/4152-1899-0x0000000000400000-0x000000000048F000-memory.dmp

memory/3404-1898-0x0000000000400000-0x000000000048F000-memory.dmp

memory/3012-1896-0x0000000000400000-0x000000000048F000-memory.dmp

memory/4664-1894-0x0000000000400000-0x000000000048F000-memory.dmp

memory/5032-1892-0x0000000000400000-0x000000000048F000-memory.dmp

memory/4720-1890-0x0000000000400000-0x000000000048F000-memory.dmp

memory/3260-1889-0x0000000000400000-0x000000000048F000-memory.dmp

memory/1416-1893-0x0000000000400000-0x000000000048F000-memory.dmp

memory/4796-1905-0x0000000000400000-0x000000000048F000-memory.dmp

memory/2692-1911-0x0000000000400000-0x000000000048F000-memory.dmp

memory/3828-1917-0x0000000000400000-0x000000000048F000-memory.dmp

memory/3456-1919-0x0000000000400000-0x000000000048F000-memory.dmp

memory/1936-1918-0x0000000000400000-0x000000000048F000-memory.dmp

memory/1632-1916-0x0000000000400000-0x000000000048F000-memory.dmp

memory/4640-1915-0x0000000000400000-0x000000000048F000-memory.dmp

memory/4916-1913-0x0000000000400000-0x000000000048F000-memory.dmp

memory/3068-1910-0x0000000000400000-0x000000000048F000-memory.dmp

memory/4460-1909-0x0000000000400000-0x000000000048F000-memory.dmp

memory/3644-1914-0x0000000000400000-0x000000000048F000-memory.dmp

memory/784-1912-0x0000000000400000-0x000000000048F000-memory.dmp

memory/4092-1907-0x0000000000400000-0x000000000048F000-memory.dmp

memory/1828-1908-0x0000000000400000-0x000000000048F000-memory.dmp

memory/3788-1904-0x0000000000400000-0x000000000048F000-memory.dmp

memory/2324-1903-0x0000000000400000-0x000000000048F000-memory.dmp

memory/3064-1906-0x0000000000400000-0x000000000048F000-memory.dmp

memory/1868-1972-0x0000000000400000-0x000000000048F000-memory.dmp

memory/2312-2273-0x0000000000400000-0x000000000048F000-memory.dmp

memory/9540-2742-0x0000000000400000-0x000000000048F000-memory.dmp

memory/3716-2757-0x0000000000400000-0x000000000048F000-memory.dmp

memory/9924-2756-0x0000000000400000-0x000000000048F000-memory.dmp

memory/5016-2743-0x0000000000400000-0x000000000048F000-memory.dmp

memory/9732-2758-0x0000000000400000-0x000000000048F000-memory.dmp

memory/8652-2761-0x0000000000400000-0x000000000048F000-memory.dmp

memory/11008-2763-0x0000000000400000-0x000000000048F000-memory.dmp

memory/9824-2764-0x0000000000400000-0x000000000048F000-memory.dmp

memory/8072-2762-0x0000000000400000-0x000000000048F000-memory.dmp

memory/9876-2765-0x0000000000400000-0x000000000048F000-memory.dmp

memory/9768-2760-0x0000000000400000-0x000000000048F000-memory.dmp

memory/2768-2759-0x0000000000400000-0x000000000048F000-memory.dmp

memory/10108-2767-0x0000000000400000-0x000000000048F000-memory.dmp

memory/9624-2769-0x0000000000400000-0x000000000048F000-memory.dmp

memory/9348-2770-0x0000000000400000-0x000000000048F000-memory.dmp

memory/9956-2768-0x0000000000400000-0x000000000048F000-memory.dmp

memory/10020-2766-0x0000000000400000-0x000000000048F000-memory.dmp

memory/10152-2771-0x0000000000400000-0x000000000048F000-memory.dmp

memory/8332-2772-0x0000000000400000-0x000000000048F000-memory.dmp

memory/700-2773-0x0000000000400000-0x000000000048F000-memory.dmp

memory/4808-2774-0x0000000000400000-0x000000000048F000-memory.dmp

memory/3992-2778-0x0000000000400000-0x000000000048F000-memory.dmp

memory/3140-2782-0x0000000000400000-0x000000000048F000-memory.dmp

memory/336-2781-0x0000000000400000-0x000000000048F000-memory.dmp

memory/688-2780-0x0000000000400000-0x000000000048F000-memory.dmp

memory/3132-2779-0x0000000000400000-0x000000000048F000-memory.dmp

memory/2364-2777-0x0000000000400000-0x000000000048F000-memory.dmp

memory/4644-2776-0x0000000000400000-0x000000000048F000-memory.dmp

memory/1388-2775-0x0000000000400000-0x000000000048F000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\pUcC3AF.tmp

MD5 d58d9433426aae0e438e21bf5534e7c6
SHA1 f6989f671d8a7f8000274013253498df6e852fb0
SHA256 2de3788d864720663c636d98813451e320311e3a04de97532efc373a44d635f7
SHA512 e278ed697c636ad115f3f73912a1d7551191ca3da483b701aa4e41e057dc81e4ed6f8280678fe030485207796c983c0cc394c69f6ba822028369e73fcd417c08

C:\Program Files\7-Zip\7zG.exe

MD5 2514110579dccd6b69fc543f5bb2f794
SHA1 fec23c87b86fed2786914ef8b96753d265c9381f
SHA256 729e9cc60ae53f5b87f4fc1df1cbcb4ab3d9a5c36b7fe194ebde059d2eb924e9
SHA512 19e42cf0d931e6ad6f6e6ba9d69bf2830022277b3769ec403b79f8190f8b542749b864142f9e5e1bd50714b57b0eb06db202f865fdfbd9af8151a3fef79285a5

C:\Users\Admin\AppData\Local\Temp\pUcC3D6.tmp

MD5 8b732ad6eef197fe9eb873e22314e4fe
SHA1 da872f133902ca59eae0d46aa933cbffb92d4713
SHA256 1328ae2a821b917745634f46799b45008202f4be050a02cdc5f113ec0f93a050
SHA512 546fc06562e75565e2a4d927c5f12409796f381e90e53db31b0f9d87081c9d123393522d94418edb3e1d548401b585e268d5169bbae941634c38291c04a7c315

C:\Users\Admin\AppData\Local\Temp\pUcC40C.tmp

MD5 373af422431d1519fce83502cafb8492
SHA1 fc1b26211dd5d25859ca386eaf6911d5a8e7d7b4
SHA256 c0c13d6076e0c5c4d0105d2157b62eca5e09e2409db8b20e2c0ba9f21ee05a19
SHA512 fe8efdd62a43987ffe9691fa482ef94b587493199c0399f7e54ac4e4edb9051f48168dce84ac643aab902542d04afb4f970b5b61e82ab5a0a72a1a9e72db9f1c

C:\Users\Admin\AppData\Local\Temp\RCXC6A0.tmp

MD5 3d94b635771a0254cc07ac14c847622e
SHA1 c4fce4b5e3dea2746685daf60aa8223bd7a46dc6
SHA256 8a532c9e0edad3407c4caa232b710dc492d72ac9f761b03f27e9a04134118a66
SHA512 f12e279adcb18912ae0603369bb5a3dcb08802a610b93b05d1dcfa78bf06aae85ebb8624e1626ecab1a88e3451557a513c10fa45e6cdf2ca424fa975c2708464

C:\Program Files\7-Zip\7zFM.exe

MD5 cfeb6326efe7bd419e5d3a74b0b1d27f
SHA1 c72a3d302af78f86fe59b7eac92f808139d593f3
SHA256 e856cbc6134493eb7439547f67a0e2ec95280c5d4ec4c172ea0c1d613eff8897
SHA512 4b7511a848488b5f1a85a7f2cb24b16802cbd33fc91526497407a90c21dd5eda4fb4bc62dbfa9c3e5ea682b75a762f7decaeab12119bf7ef9acefa3830896da0

C:\Users\Admin\AppData\Local\Temp\RCXC6B3.tmp

MD5 3c9a5dbf46a214dd4210d754a0c578d3
SHA1 ed6849974dbf28dfd8302f7a41fb97204bb369a1
SHA256 2b8621beab67c948a6bb1bca0843ab29b63e74eea00b4234739fda25385bd13b
SHA512 ccbfec66f91b214cf9fbd19de01bf8fef43091d22e2f9a0186b68786c2cc94eaacf3bde00cacaa262fc9f3c94d33fc145f27745bada97c47b7691f52b820f34e

C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

MD5 f6bb3cadee698e71b359598a3cfcccec
SHA1 2cb0c3b4a7275531cbbb6096937e3b4a6619468c
SHA256 aca885c5f46bbeeee2f7233ac608345681ff8a750bd21ba0be2b62485183c845
SHA512 c3be6e64dfeda0de331bfe321bd47bd8c094f150fc3192f27cb05404b8c52b88e57b409045b05781a5aaa4bbcca821b2b680397097c4b4a12d78a2a7fdc204f8

C:\Users\Admin\AppData\Local\Temp\RCXF668.tmp

MD5 1544a47027a27cca6044a25bb20d813e
SHA1 388aeb59413ce797090bbae953315ab8a199aa7b
SHA256 5e6ebdf64e5af5ebc7a97a046308c8a0e8b84ab19a13052eaee8e3fffc48095b
SHA512 eae1c77c8544902a26f5a22cf65ddffa811583ab69c1fa96c01f745788fe4fb631d24a52645a54f9dea36e4db728a53f1e58b24c42828fdfccfd5bb726fb81cf