Overview
overview
10Static
static
10SAM X CHEA...k1.exe
windows7-x64
10SAM X CHEA...k1.exe
windows10-2004-x64
10Realtek HD...ce.exe
windows7-x64
10Realtek HD...ce.exe
windows10-2004-x64
10SAM X CHEA...k1.exe
windows7-x64
6SAM X CHEA...k1.exe
windows10-2004-x64
6Windows Sh...st.exe
windows7-x64
10Windows Sh...st.exe
windows10-2004-x64
10Analysis
-
max time kernel
18s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
22/11/2024, 18:51
Behavioral task
behavioral1
Sample
SAM X CHEAT crack1.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
SAM X CHEAT crack1.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Realtek HD Audio Universal Service.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Realtek HD Audio Universal Service.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
SAM X CHEAT crack1.exe
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
SAM X CHEAT crack1.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Windows Shell Experience Host.exe
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
Windows Shell Experience Host.exe
Resource
win10v2004-20241007-en
General
-
Target
SAM X CHEAT crack1.exe
-
Size
3.1MB
-
MD5
82a95b30418e5c4c3cba62b7805b09c9
-
SHA1
4921781362aae55b41c03f9aafd9e38e4555e5e3
-
SHA256
3ac3efee88adab86a250a53dd9448453fcc4223662f5c6c21453606b6eb91b77
-
SHA512
5775e02245ee0158f8f99796edc448a79f580f9c8c6c4188b491084eb9cecf48a341c3231ece8be43e005882a05dfe24dea98aeafbebe3bde0c2ef30cca9dc8b
-
SSDEEP
49152:opVFMHivibdm/rr3TxQrl18gOCNWofUNRvO3NwSS3Br+BT/KrqqXVbCuuTQjMk4P:KV4K2GTpCNJXWMxKrrlvsQRG9AmB
Malware Config
Extracted
xworm
147.185.221.23:58112
-
Install_directory
%AppData%
-
install_file
Realtek HD Audio Universal Service.exe
Extracted
xworm
5.0
147.185.221.20:65300
RMe1pa1UgjNcB2Un
-
Install_directory
%AppData%
-
install_file
Windows Shell Experience Host.exe
Signatures
-
Detect Xworm Payload 7 IoCs
resource yara_rule behavioral1/files/0x00080000000120fc-3.dat family_xworm behavioral1/files/0x0008000000019326-8.dat family_xworm behavioral1/memory/2476-17-0x0000000000D30000-0x0000000000D4A000-memory.dmp family_xworm behavioral1/memory/2256-16-0x0000000000290000-0x00000000002A4000-memory.dmp family_xworm behavioral1/memory/696-119-0x00000000773A0000-0x00000000774BF000-memory.dmp family_xworm behavioral1/memory/696-123-0x00000000774C0000-0x00000000775BA000-memory.dmp family_xworm behavioral1/memory/696-126-0x00000000773A0000-0x00000000774BF000-memory.dmp family_xworm -
Xworm family
-
Command and Scripting Interpreter: PowerShell 1 TTPs 8 IoCs
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
pid Process 2276 powershell.exe 1372 powershell.exe 3040 powershell.exe 2552 powershell.exe 316 powershell.exe 1764 powershell.exe 2216 powershell.exe 916 powershell.exe -
Executes dropped EXE 64 IoCs
pid Process 2256 Realtek HD Audio Universal Service.exe 2476 Windows Shell Experience Host.exe 2928 Realtek HD Audio Universal Service.exe 2104 Windows Shell Experience Host.exe 2688 Realtek HD Audio Universal Service.exe 3052 Windows Shell Experience Host.exe 2680 Realtek HD Audio Universal Service.exe 2716 Windows Shell Experience Host.exe 692 Realtek HD Audio Universal Service.exe 2648 Windows Shell Experience Host.exe 1928 Realtek HD Audio Universal Service.exe 2448 Windows Shell Experience Host.exe 3056 Realtek HD Audio Universal Service.exe 2956 Windows Shell Experience Host.exe 3032 Realtek HD Audio Universal Service.exe 3008 Windows Shell Experience Host.exe 2964 Realtek HD Audio Universal Service.exe 2572 Windows Shell Experience Host.exe 2544 Realtek HD Audio Universal Service.exe 976 Windows Shell Experience Host.exe 1768 Realtek HD Audio Universal Service.exe 2112 Windows Shell Experience Host.exe 2184 Realtek HD Audio Universal Service.exe 2200 Windows Shell Experience Host.exe 272 Realtek HD Audio Universal Service.exe 2160 Windows Shell Experience Host.exe 1536 Realtek HD Audio Universal Service.exe 928 Windows Shell Experience Host.exe 2040 Realtek HD Audio Universal Service.exe 1020 Windows Shell Experience Host.exe 1764 Realtek HD Audio Universal Service.exe 860 Windows Shell Experience Host.exe 2000 Realtek HD Audio Universal Service.exe 2004 Windows Shell Experience Host.exe 320 Realtek HD Audio Universal Service.exe 1152 Windows Shell Experience Host.exe 548 Realtek HD Audio Universal Service.exe 332 Windows Shell Experience Host.exe 2284 Realtek HD Audio Universal Service.exe 2536 Windows Shell Experience Host.exe 2924 Realtek HD Audio Universal Service.exe 2228 Windows Shell Experience Host.exe 2904 Realtek HD Audio Universal Service.exe 2912 Windows Shell Experience Host.exe 2296 Realtek HD Audio Universal Service.exe 952 Windows Shell Experience Host.exe 2364 Realtek HD Audio Universal Service.exe 1876 Windows Shell Experience Host.exe 1400 Realtek HD Audio Universal Service.exe 2636 Windows Shell Experience Host.exe 2484 Realtek HD Audio Universal Service.exe 2804 Windows Shell Experience Host.exe 2852 Realtek HD Audio Universal Service.exe 2256 Windows Shell Experience Host.exe 1048 Realtek HD Audio Universal Service.exe 2448 Windows Shell Experience Host.exe 2588 Realtek HD Audio Universal Service.exe 2752 Windows Shell Experience Host.exe 2668 Realtek HD Audio Universal Service.exe 1528 Windows Shell Experience Host.exe 3032 Realtek HD Audio Universal Service.exe 1280 Windows Shell Experience Host.exe 328 Realtek HD Audio Universal Service.exe 1488 Windows Shell Experience Host.exe -
Loads dropped DLL 64 IoCs
pid Process 1996 SAM X CHEAT crack1.exe 1996 SAM X CHEAT crack1.exe 2808 SAM X CHEAT crack1.exe 2808 SAM X CHEAT crack1.exe 2820 SAM X CHEAT crack1.exe 2820 SAM X CHEAT crack1.exe 2776 SAM X CHEAT crack1.exe 2776 SAM X CHEAT crack1.exe 2736 SAM X CHEAT crack1.exe 2736 SAM X CHEAT crack1.exe 1628 SAM X CHEAT crack1.exe 1628 SAM X CHEAT crack1.exe 1744 SAM X CHEAT crack1.exe 1744 SAM X CHEAT crack1.exe 2248 SAM X CHEAT crack1.exe 2248 SAM X CHEAT crack1.exe 2764 SAM X CHEAT crack1.exe 2764 SAM X CHEAT crack1.exe 1076 SAM X CHEAT crack1.exe 1076 SAM X CHEAT crack1.exe 1212 SAM X CHEAT crack1.exe 1212 SAM X CHEAT crack1.exe 2384 SAM X CHEAT crack1.exe 2384 SAM X CHEAT crack1.exe 2508 SAM X CHEAT crack1.exe 2508 SAM X CHEAT crack1.exe 1308 SAM X CHEAT crack1.exe 1308 SAM X CHEAT crack1.exe 700 SAM X CHEAT crack1.exe 700 SAM X CHEAT crack1.exe 1380 SAM X CHEAT crack1.exe 1380 SAM X CHEAT crack1.exe 1728 SAM X CHEAT crack1.exe 1728 SAM X CHEAT crack1.exe 1736 SAM X CHEAT crack1.exe 1736 SAM X CHEAT crack1.exe 2500 SAM X CHEAT crack1.exe 2500 SAM X CHEAT crack1.exe 1588 SAM X CHEAT crack1.exe 1588 SAM X CHEAT crack1.exe 1584 SAM X CHEAT crack1.exe 1584 SAM X CHEAT crack1.exe 2920 SAM X CHEAT crack1.exe 2920 SAM X CHEAT crack1.exe 2940 SAM X CHEAT crack1.exe 2940 SAM X CHEAT crack1.exe 1732 SAM X CHEAT crack1.exe 1732 SAM X CHEAT crack1.exe 2204 SAM X CHEAT crack1.exe 2204 SAM X CHEAT crack1.exe 1620 SAM X CHEAT crack1.exe 1620 SAM X CHEAT crack1.exe 2800 SAM X CHEAT crack1.exe 2800 SAM X CHEAT crack1.exe 2704 SAM X CHEAT crack1.exe 2704 SAM X CHEAT crack1.exe 2084 SAM X CHEAT crack1.exe 2084 SAM X CHEAT crack1.exe 848 SAM X CHEAT crack1.exe 848 SAM X CHEAT crack1.exe 2176 SAM X CHEAT crack1.exe 2176 SAM X CHEAT crack1.exe 2424 SAM X CHEAT crack1.exe 2424 SAM X CHEAT crack1.exe -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Windows\CurrentVersion\Run\Realtek HD Audio Universal Service = "C:\\Users\\Admin\\AppData\\Roaming\\Realtek HD Audio Universal Service.exe" Realtek HD Audio Universal Service.exe -
Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 5 ip-api.com 6 ip-api.com -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 64 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAM X CHEAT crack1.exe -
Suspicious behavior: EnumeratesProcesses 9 IoCs
pid Process 2552 powershell.exe 316 powershell.exe 2216 powershell.exe 1764 powershell.exe 916 powershell.exe 2276 powershell.exe 1372 powershell.exe 3040 powershell.exe 3056 Realtek HD Audio Universal Service.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 2256 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 2680 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 3052 Windows Shell Experience Host.exe Token: SeDebugPrivilege 2476 Windows Shell Experience Host.exe Token: SeDebugPrivilege 2928 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 2688 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 2104 Windows Shell Experience Host.exe Token: SeDebugPrivilege 2448 Windows Shell Experience Host.exe Token: SeDebugPrivilege 2716 Windows Shell Experience Host.exe Token: SeDebugPrivilege 692 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 2648 Windows Shell Experience Host.exe Token: SeDebugPrivilege 1928 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 3056 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 2956 Windows Shell Experience Host.exe Token: SeDebugPrivilege 3032 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 3008 Windows Shell Experience Host.exe Token: SeDebugPrivilege 2572 Windows Shell Experience Host.exe Token: SeDebugPrivilege 2964 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 976 Windows Shell Experience Host.exe Token: SeDebugPrivilege 2544 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 2112 Windows Shell Experience Host.exe Token: SeDebugPrivilege 1768 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 2200 Windows Shell Experience Host.exe Token: SeDebugPrivilege 2184 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 272 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 2160 Windows Shell Experience Host.exe Token: SeDebugPrivilege 928 Windows Shell Experience Host.exe Token: SeDebugPrivilege 1536 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 2040 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 1020 Windows Shell Experience Host.exe Token: SeDebugPrivilege 860 Windows Shell Experience Host.exe Token: SeDebugPrivilege 1764 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 2004 Windows Shell Experience Host.exe Token: SeDebugPrivilege 2000 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 1152 Windows Shell Experience Host.exe Token: SeDebugPrivilege 320 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 332 Windows Shell Experience Host.exe Token: SeDebugPrivilege 548 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 2284 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 2536 Windows Shell Experience Host.exe Token: SeDebugPrivilege 2228 Windows Shell Experience Host.exe Token: SeDebugPrivilege 2924 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 2912 Windows Shell Experience Host.exe Token: SeDebugPrivilege 2904 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 2296 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 952 Windows Shell Experience Host.exe Token: SeDebugPrivilege 2364 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 1876 Windows Shell Experience Host.exe Token: SeDebugPrivilege 2636 Windows Shell Experience Host.exe Token: SeDebugPrivilege 1400 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 2804 Windows Shell Experience Host.exe Token: SeDebugPrivilege 2484 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 2852 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 2256 Windows Shell Experience Host.exe Token: SeDebugPrivilege 2448 Windows Shell Experience Host.exe Token: SeDebugPrivilege 1048 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 2588 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 2752 Windows Shell Experience Host.exe Token: SeDebugPrivilege 1528 Windows Shell Experience Host.exe Token: SeDebugPrivilege 2668 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 3032 Realtek HD Audio Universal Service.exe Token: SeDebugPrivilege 1280 Windows Shell Experience Host.exe Token: SeDebugPrivilege 1488 Windows Shell Experience Host.exe Token: SeDebugPrivilege 328 Realtek HD Audio Universal Service.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3056 Realtek HD Audio Universal Service.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1996 wrote to memory of 2256 1996 SAM X CHEAT crack1.exe 29 PID 1996 wrote to memory of 2256 1996 SAM X CHEAT crack1.exe 29 PID 1996 wrote to memory of 2256 1996 SAM X CHEAT crack1.exe 29 PID 1996 wrote to memory of 2256 1996 SAM X CHEAT crack1.exe 29 PID 1996 wrote to memory of 2476 1996 SAM X CHEAT crack1.exe 30 PID 1996 wrote to memory of 2476 1996 SAM X CHEAT crack1.exe 30 PID 1996 wrote to memory of 2476 1996 SAM X CHEAT crack1.exe 30 PID 1996 wrote to memory of 2476 1996 SAM X CHEAT crack1.exe 30 PID 1996 wrote to memory of 2808 1996 SAM X CHEAT crack1.exe 31 PID 1996 wrote to memory of 2808 1996 SAM X CHEAT crack1.exe 31 PID 1996 wrote to memory of 2808 1996 SAM X CHEAT crack1.exe 31 PID 1996 wrote to memory of 2808 1996 SAM X CHEAT crack1.exe 31 PID 2808 wrote to memory of 2928 2808 SAM X CHEAT crack1.exe 32 PID 2808 wrote to memory of 2928 2808 SAM X CHEAT crack1.exe 32 PID 2808 wrote to memory of 2928 2808 SAM X CHEAT crack1.exe 32 PID 2808 wrote to memory of 2928 2808 SAM X CHEAT crack1.exe 32 PID 2808 wrote to memory of 2104 2808 SAM X CHEAT crack1.exe 33 PID 2808 wrote to memory of 2104 2808 SAM X CHEAT crack1.exe 33 PID 2808 wrote to memory of 2104 2808 SAM X CHEAT crack1.exe 33 PID 2808 wrote to memory of 2104 2808 SAM X CHEAT crack1.exe 33 PID 2808 wrote to memory of 2820 2808 SAM X CHEAT crack1.exe 34 PID 2808 wrote to memory of 2820 2808 SAM X CHEAT crack1.exe 34 PID 2808 wrote to memory of 2820 2808 SAM X CHEAT crack1.exe 34 PID 2808 wrote to memory of 2820 2808 SAM X CHEAT crack1.exe 34 PID 2820 wrote to memory of 2688 2820 SAM X CHEAT crack1.exe 35 PID 2820 wrote to memory of 2688 2820 SAM X CHEAT crack1.exe 35 PID 2820 wrote to memory of 2688 2820 SAM X CHEAT crack1.exe 35 PID 2820 wrote to memory of 2688 2820 SAM X CHEAT crack1.exe 35 PID 2820 wrote to memory of 3052 2820 SAM X CHEAT crack1.exe 36 PID 2820 wrote to memory of 3052 2820 SAM X CHEAT crack1.exe 36 PID 2820 wrote to memory of 3052 2820 SAM X CHEAT crack1.exe 36 PID 2820 wrote to memory of 3052 2820 SAM X CHEAT crack1.exe 36 PID 2820 wrote to memory of 2776 2820 SAM X CHEAT crack1.exe 37 PID 2820 wrote to memory of 2776 2820 SAM X CHEAT crack1.exe 37 PID 2820 wrote to memory of 2776 2820 SAM X CHEAT crack1.exe 37 PID 2820 wrote to memory of 2776 2820 SAM X CHEAT crack1.exe 37 PID 2776 wrote to memory of 2680 2776 SAM X CHEAT crack1.exe 38 PID 2776 wrote to memory of 2680 2776 SAM X CHEAT crack1.exe 38 PID 2776 wrote to memory of 2680 2776 SAM X CHEAT crack1.exe 38 PID 2776 wrote to memory of 2680 2776 SAM X CHEAT crack1.exe 38 PID 2776 wrote to memory of 2716 2776 SAM X CHEAT crack1.exe 39 PID 2776 wrote to memory of 2716 2776 SAM X CHEAT crack1.exe 39 PID 2776 wrote to memory of 2716 2776 SAM X CHEAT crack1.exe 39 PID 2776 wrote to memory of 2716 2776 SAM X CHEAT crack1.exe 39 PID 2776 wrote to memory of 2736 2776 SAM X CHEAT crack1.exe 40 PID 2776 wrote to memory of 2736 2776 SAM X CHEAT crack1.exe 40 PID 2776 wrote to memory of 2736 2776 SAM X CHEAT crack1.exe 40 PID 2776 wrote to memory of 2736 2776 SAM X CHEAT crack1.exe 40 PID 2736 wrote to memory of 692 2736 SAM X CHEAT crack1.exe 41 PID 2736 wrote to memory of 692 2736 SAM X CHEAT crack1.exe 41 PID 2736 wrote to memory of 692 2736 SAM X CHEAT crack1.exe 41 PID 2736 wrote to memory of 692 2736 SAM X CHEAT crack1.exe 41 PID 2736 wrote to memory of 2648 2736 SAM X CHEAT crack1.exe 42 PID 2736 wrote to memory of 2648 2736 SAM X CHEAT crack1.exe 42 PID 2736 wrote to memory of 2648 2736 SAM X CHEAT crack1.exe 42 PID 2736 wrote to memory of 2648 2736 SAM X CHEAT crack1.exe 42 PID 2736 wrote to memory of 1628 2736 SAM X CHEAT crack1.exe 43 PID 2736 wrote to memory of 1628 2736 SAM X CHEAT crack1.exe 43 PID 2736 wrote to memory of 1628 2736 SAM X CHEAT crack1.exe 43 PID 2736 wrote to memory of 1628 2736 SAM X CHEAT crack1.exe 43 PID 1628 wrote to memory of 1928 1628 SAM X CHEAT crack1.exe 44 PID 1628 wrote to memory of 1928 1628 SAM X CHEAT crack1.exe 44 PID 1628 wrote to memory of 1928 1628 SAM X CHEAT crack1.exe 44 PID 1628 wrote to memory of 1928 1628 SAM X CHEAT crack1.exe 44
Processes
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1996 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"2⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2256
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"2⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2476
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"2⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2808 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"3⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2928
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"3⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2104 -
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe'4⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
PID:2552
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess 'Windows Shell Experience Host.exe'4⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
PID:2216
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\Windows Shell Experience Host.exe'4⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
PID:2276
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess 'Windows Shell Experience Host.exe'4⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
PID:3040
-
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"3⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2820 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"4⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2688
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"4⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:3052
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"4⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2776 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"5⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2680
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"5⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2716
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"5⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2736 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"6⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:692
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"6⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2648
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"6⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1628 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"7⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:1928
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"7⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2448
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"7⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1744 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"8⤵
- Executes dropped EXE
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:3056 -
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe'9⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
PID:316
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess 'Realtek HD Audio Universal Service.exe'9⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
PID:1764
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\Realtek HD Audio Universal Service.exe'9⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
PID:916
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess 'Realtek HD Audio Universal Service.exe'9⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
PID:1372
-
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"8⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2956
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"8⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2248 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"9⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:3032
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"9⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:3008
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"9⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2764 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"10⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2964
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"10⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2572
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"10⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1076 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"11⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2544
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"11⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:976
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"11⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1212 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"12⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:1768
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"12⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2112
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"12⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2384 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"13⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2184
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"13⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2200
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"13⤵
- Loads dropped DLL
PID:2508 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"14⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:272
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"14⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2160
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"14⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1308 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"15⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:1536
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"15⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:928
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"15⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:700 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"16⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2040
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"16⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:1020
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"16⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1380 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"17⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:1764
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"17⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:860
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"17⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1728 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"18⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2000
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"18⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2004
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"18⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1736 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"19⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:320
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"19⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:1152
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"19⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2500 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"20⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:548
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"20⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:332
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"20⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1588 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"21⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2284
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"21⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2536
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"21⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1584 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"22⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2924
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"22⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2228
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"22⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2920 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"23⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2904
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"23⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2912
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"23⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2940 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"24⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2296
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"24⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:952
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"24⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1732 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"25⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2364
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"25⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:1876
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"25⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2204 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"26⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:1400
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"26⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2636
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"26⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1620 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"27⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2484
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"27⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2804
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"27⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2800 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"28⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2852
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"28⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2256
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"28⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2704 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"29⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:1048
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"29⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2448
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"29⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2084 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"30⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2588
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"30⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2752
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"30⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:848 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"31⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2668
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"31⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:1528
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"31⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2176 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"32⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:3032
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"32⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:1280
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"32⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2424 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"33⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:328
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"33⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:1488
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"33⤵
- System Location Discovery: System Language Discovery
PID:2276 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"34⤵PID:1620
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"34⤵PID:1872
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"34⤵
- System Location Discovery: System Language Discovery
PID:2112 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"35⤵PID:2800
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"35⤵PID:2392
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"35⤵
- System Location Discovery: System Language Discovery
PID:2388 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"36⤵PID:1640
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"36⤵PID:2724
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"36⤵
- System Location Discovery: System Language Discovery
PID:1804 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"37⤵PID:2564
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"37⤵PID:2128
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"37⤵PID:2456
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"38⤵PID:2828
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"38⤵PID:2928
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"38⤵
- System Location Discovery: System Language Discovery
PID:3012 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"39⤵PID:2508
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"39⤵PID:2176
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"39⤵
- System Location Discovery: System Language Discovery
PID:1064 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"40⤵PID:2352
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"40⤵PID:1308
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"40⤵
- System Location Discovery: System Language Discovery
PID:2320 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"41⤵PID:2064
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"41⤵PID:1768
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"41⤵
- System Location Discovery: System Language Discovery
PID:2436 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"42⤵PID:2820
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"42⤵PID:332
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"42⤵
- System Location Discovery: System Language Discovery
PID:2488 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"43⤵PID:2388
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"43⤵PID:1428
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"43⤵
- System Location Discovery: System Language Discovery
PID:696 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"44⤵PID:280
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"44⤵PID:2744
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"44⤵
- System Location Discovery: System Language Discovery
PID:2300 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"45⤵PID:3064
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"45⤵PID:3040
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"45⤵
- System Location Discovery: System Language Discovery
PID:2912 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"46⤵PID:2628
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"46⤵PID:1288
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"46⤵
- System Location Discovery: System Language Discovery
PID:952 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"47⤵PID:1520
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"47⤵PID:2016
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"47⤵
- System Location Discovery: System Language Discovery
PID:2240 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"48⤵PID:1400
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"48⤵PID:1080
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"48⤵PID:2972
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"49⤵PID:2172
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"49⤵PID:1804
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"49⤵
- System Location Discovery: System Language Discovery
PID:696 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"50⤵PID:2844
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"50⤵PID:1060
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"50⤵PID:2936
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"51⤵PID:2964
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"51⤵PID:1672
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"51⤵
- System Location Discovery: System Language Discovery
PID:1492 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"52⤵PID:1312
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"52⤵PID:2720
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"52⤵
- System Location Discovery: System Language Discovery
PID:2832 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"53⤵PID:2968
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"53⤵PID:2316
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"53⤵
- System Location Discovery: System Language Discovery
PID:3032 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"54⤵PID:928
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"54⤵PID:2300
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"54⤵
- System Location Discovery: System Language Discovery
PID:936 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"55⤵PID:1836
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"55⤵PID:2788
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"55⤵PID:2564
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"56⤵PID:2900
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"56⤵PID:1688
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"56⤵
- System Location Discovery: System Language Discovery
PID:1876 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"57⤵PID:2012
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"57⤵PID:2256
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"57⤵
- System Location Discovery: System Language Discovery
PID:2648 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"58⤵PID:1708
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"58⤵PID:1204
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"58⤵
- System Location Discovery: System Language Discovery
PID:2116 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"59⤵PID:2980
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"59⤵PID:2804
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"59⤵
- System Location Discovery: System Language Discovery
PID:2284 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"60⤵PID:2536
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"60⤵PID:1736
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"60⤵
- System Location Discovery: System Language Discovery
PID:2764 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"61⤵PID:2744
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"61⤵PID:2456
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"61⤵
- System Location Discovery: System Language Discovery
PID:1664 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"62⤵PID:1368
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"62⤵PID:1868
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"62⤵
- System Location Discovery: System Language Discovery
PID:2484 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"63⤵PID:1628
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"63⤵PID:2628
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"63⤵PID:2292
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"64⤵PID:880
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"64⤵PID:2144
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"64⤵
- System Location Discovery: System Language Discovery
PID:1400 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"65⤵PID:328
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"65⤵PID:1720
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"65⤵
- System Location Discovery: System Language Discovery
PID:2936 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"66⤵PID:1816
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"66⤵PID:2648
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"66⤵
- System Location Discovery: System Language Discovery
PID:2084 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"67⤵PID:1108
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"67⤵PID:1744
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"67⤵
- System Location Discovery: System Language Discovery
PID:2872 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"68⤵PID:696
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"68⤵PID:1380
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"68⤵
- System Location Discovery: System Language Discovery
PID:2100 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"69⤵PID:2756
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"69⤵PID:560
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"69⤵
- System Location Discovery: System Language Discovery
PID:2752 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"70⤵PID:700
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"70⤵PID:1312
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"70⤵PID:1752
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"71⤵PID:2064
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"71⤵PID:860
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"71⤵
- System Location Discovery: System Language Discovery
PID:960 -
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"72⤵PID:2548
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"72⤵PID:1780
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"72⤵PID:1548
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"73⤵PID:2464
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"73⤵PID:2992
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"73⤵PID:2316
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"74⤵PID:3004
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"74⤵PID:1740
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"74⤵PID:676
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"75⤵PID:1812
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"75⤵PID:2928
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"75⤵PID:2332
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"76⤵PID:2952
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"76⤵PID:1260
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"76⤵PID:2828
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"77⤵PID:1064
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"77⤵PID:1756
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"77⤵PID:2432
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"78⤵PID:2588
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"78⤵PID:2476
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"78⤵PID:2368
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"79⤵PID:1492
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"79⤵PID:2868
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"79⤵PID:1692
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"80⤵PID:2132
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"80⤵PID:2220
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"80⤵PID:2564
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"81⤵PID:1548
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"81⤵PID:2460
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"81⤵PID:2620
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"82⤵PID:1328
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"82⤵PID:2152
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"82⤵PID:1236
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"83⤵PID:1020
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"83⤵PID:2440
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"83⤵PID:3020
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"84⤵PID:1540
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"84⤵PID:932
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"84⤵PID:2652
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"85⤵PID:2632
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"85⤵PID:1784
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"85⤵PID:2128
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"86⤵PID:1692
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"86⤵PID:1712
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"86⤵PID:976
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"87⤵PID:2564
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"87⤵PID:2136
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"87⤵PID:2352
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"88⤵PID:928
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"88⤵PID:3064
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"88⤵PID:2380
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"89⤵PID:1872
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"89⤵PID:1744
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"89⤵PID:3020
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"90⤵PID:2392
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"90⤵PID:2652
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"90⤵PID:2300
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"91⤵PID:2988
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"91⤵PID:2940
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"91⤵PID:2348
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"92⤵PID:1596
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"92⤵PID:2560
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"92⤵PID:1964
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"93⤵PID:976
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"93⤵PID:2636
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"93⤵PID:2548
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"94⤵PID:2984
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"94⤵PID:1780
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"94⤵PID:676
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"95⤵PID:2992
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"95⤵PID:2540
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"95⤵PID:1108
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"96⤵PID:2428
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"96⤵PID:2068
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"96⤵PID:696
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"97⤵PID:548
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"97⤵PID:2772
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"97⤵PID:2704
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"98⤵PID:2272
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"98⤵PID:1432
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"98⤵PID:1064
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"99⤵PID:2044
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"99⤵PID:1672
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"99⤵PID:2668
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"100⤵PID:960
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"100⤵PID:3016
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"100⤵PID:1644
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"101⤵PID:2016
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"101⤵PID:1764
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"101⤵PID:3044
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"102⤵PID:1976
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"102⤵PID:2132
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"102⤵PID:2892
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"103⤵PID:1144
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"103⤵PID:272
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"103⤵PID:2092
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"104⤵PID:2400
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"104⤵PID:2432
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"104⤵PID:968
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"105⤵PID:2284
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"105⤵PID:2756
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"105⤵PID:2000
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"106⤵PID:1756
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"106⤵PID:940
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"106⤵PID:1064
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"107⤵PID:2976
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"107⤵PID:2524
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"107⤵PID:328
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"108⤵PID:2504
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"108⤵PID:1564
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"108⤵PID:568
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"109⤵PID:1152
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"109⤵PID:1196
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"109⤵PID:3064
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"110⤵PID:2172
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"110⤵PID:2564
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"110⤵PID:2332
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"111⤵PID:1188
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"111⤵PID:952
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"111⤵PID:612
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"112⤵PID:2920
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"112⤵PID:2120
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"112⤵PID:1864
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"113⤵PID:2940
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"113⤵PID:2764
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"113⤵PID:1668
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"114⤵PID:1644
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"114⤵PID:1492
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"114⤵PID:2004
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"115⤵PID:2240
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"115⤵PID:552
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"115⤵PID:2544
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"116⤵PID:1620
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"116⤵PID:2116
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"116⤵PID:2112
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"117⤵PID:848
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"117⤵PID:2344
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"117⤵PID:1164
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"118⤵PID:2440
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"118⤵PID:1072
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"118⤵PID:108
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"119⤵PID:548
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"119⤵PID:2744
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"119⤵PID:1864
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"120⤵PID:796
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"120⤵PID:2852
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"120⤵PID:1544
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"121⤵PID:2388
-
-
C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"C:\Users\Admin\AppData\Local\Temp\Windows Shell Experience Host.exe"121⤵PID:1988
-
-
C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"C:\Users\Admin\AppData\Local\Temp\SAM X CHEAT crack1.exe"121⤵PID:2760
-
C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"C:\Users\Admin\AppData\Local\Temp\Realtek HD Audio Universal Service.exe"122⤵PID:2316
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-