26f72736cca71feeaba616f5693f77466501f5888fe8e4bcf23d0ab045a1c14b

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/05/2026, 01:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
Size 167KB
Sample260523-b99d4acz5x
SHA256 26f72736cca71feeaba616f5693f77466501f5888fe8e4bcf23d0ab045a1c14b
MD5 c4e1f1d2c4ec0c190b07ac165c108f06
SHA1 56431b6e884127f06689d4f2ec0aa3e896220b48
SHA512 3f042f744bc02aa751aa49520d7ebe3448c7f74cf428c9b52eedc499413cfa32b84f1f78d67f366e24e9f4912cf67d7b645e86378d911cd2d4803d6747dae200
SSDEEP 3072:27uZwOuz/xS3iGpZMhDEXzkOSUUKeF8a7bXxBgW4gff:lwBxE1+ijiBK4
TLSH
T1F5F34B68961D8416E88C09746C1317695AF27C3C6F2DCA2F9744FF2D287B3D87AC960B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4388 wrote to memory of 3888	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	88
PID 4388 wrote to memory of 4524	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	89
PID 4388 wrote to memory of 560	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	90
PID 4388 wrote to memory of 4244	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	91
PID 4388 wrote to memory of 2512	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	92
PID 4388 wrote to memory of 1168	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	93
PID 4388 wrote to memory of 4808	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	94
PID 4388 wrote to memory of 2368	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	95
PID 4388 wrote to memory of 564	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	96
PID 4388 wrote to memory of 4820	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	97
PID 4388 wrote to memory of 1876	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	98
PID 4388 wrote to memory of 2760	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	99
PID 4388 wrote to memory of 4540	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	100
PID 4388 wrote to memory of 1080	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	101
PID 4388 wrote to memory of 1124	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	102
PID 4388 wrote to memory of 3820	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	103
PID 4388 wrote to memory of 456	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	104
PID 4388 wrote to memory of 2520	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	105
PID 4388 wrote to memory of 3928	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	106
PID 4388 wrote to memory of 2004	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	107
PID 4388 wrote to memory of 2328	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	108
PID 4388 wrote to memory of 1204	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	109
PID 4388 wrote to memory of 4164	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	110
PID 4388 wrote to memory of 1612	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	111
PID 4388 wrote to memory of 4832	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	112
PID 4388 wrote to memory of 552	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	113
PID 4388 wrote to memory of 540	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	114
PID 4388 wrote to memory of 548	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	115
PID 4388 wrote to memory of 3432	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	116
PID 4388 wrote to memory of 3272	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	117
PID 4388 wrote to memory of 2320	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	118
PID 4388 wrote to memory of 1416	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	119
PID 4388 wrote to memory of 4376	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	120
PID 4388 wrote to memory of 3092	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	121
PID 4388 wrote to memory of 3344	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	122
PID 4388 wrote to memory of 1640	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	123
PID 4388 wrote to memory of 1148	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	124
PID 4388 wrote to memory of 1520	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	125
PID 4388 wrote to memory of 4228	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	126
PID 4388 wrote to memory of 5112	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	127
PID 4388 wrote to memory of 5096	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	128
PID 4388 wrote to memory of 332	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	129
PID 4388 wrote to memory of 1200	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	130
PID 4388 wrote to memory of 2376	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	131
PID 4388 wrote to memory of 4608	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	132
PID 4388 wrote to memory of 4520	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	133
PID 4388 wrote to memory of 2408	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	134
PID 4388 wrote to memory of 4880	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	135
PID 4388 wrote to memory of 2688	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	136
PID 4388 wrote to memory of 4896	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	137
PID 4388 wrote to memory of 4920	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	138
PID 4388 wrote to memory of 2940	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	139
PID 4388 wrote to memory of 3360	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	140
PID 4388 wrote to memory of 4816	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	141
PID 4388 wrote to memory of 4300	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	142
PID 4388 wrote to memory of 1128	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	143
PID 4388 wrote to memory of 1036	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	144
PID 4388 wrote to memory of 5024	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	145
PID 4388 wrote to memory of 4420	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	146
PID 4388 wrote to memory of 3992	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	147
PID 4388 wrote to memory of 3952	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	148
PID 4388 wrote to memory of 4900	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	149
PID 4388 wrote to memory of 4464	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	150
PID 4388 wrote to memory of 3320	4388	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	151

C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4388
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3888
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4524
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:560
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4244
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2512
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1168
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4808
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2368
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:564
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4820
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1876
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2760
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4540
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1080
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1124
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3820
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:456
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2520
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3928
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2004
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2328
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1204
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4164
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1612
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4832
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:552
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:540
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:548
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3432
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3272
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2320
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1416
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4376
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3092
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3344
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1640
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1148
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1520
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4228
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:5112
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:5096
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:332
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1200
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2376
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4608
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4520
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2408
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4880
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2688
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4896
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4920
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2940
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3360
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4816
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4300
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1128
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1036
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:5024
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4420
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3992
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3952
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4900
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4464
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3320
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3324
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1708
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4040
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1800
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2672
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1764
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4476
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2980
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1540
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4600
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4692
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4152
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4936
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1684
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4628
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1744
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4908
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2324
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:692
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2988
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3180
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:240
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:224
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:260
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:888
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1004
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4368
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4428
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1836
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2804
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2228
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3936
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:60
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4252
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2848
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2932
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3860
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3904
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3084
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3712
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1668
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3488
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3332
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1208
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2456
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1740
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:968
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2840
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1268
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:5076
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4060
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2692
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1780
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4924
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1776
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4180
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4312
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1116
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1108
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4176
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1748
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4844
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4860
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4932
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1248
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3908
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2728
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2060
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4372
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:5092
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3248
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:384
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2380
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4552
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4836
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3120
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1056
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:5040
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3492
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1880
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:668
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3960
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4720
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4772
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1412
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4716
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4196
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3168
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3588
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3808
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3984
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4980
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4912
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3520
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2996
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4264
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3752
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3824
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3920
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3500
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:464
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4956
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3812
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3576
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3880
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3452
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2508
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2172
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:452
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4556
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1664
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:432
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3000
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:764
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:956
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2960
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2732
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:836
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1852
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3228
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:5088
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1180
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:868
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2712
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:5116
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2568
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4240
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4340
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1032
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:5028
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1948
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2984
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2280
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4568
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:5056
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3864

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4388-0-0x0000000002340000-0x0000000002345000-memory.dmp

Download