26f72736cca71feeaba616f5693f77466501f5888fe8e4bcf23d0ab045a1c14b

Analysis

max time kernel
149s
max time network
116s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
23/05/2026, 01:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
Size 167KB
Sample260523-b99d4acz5x
SHA256 26f72736cca71feeaba616f5693f77466501f5888fe8e4bcf23d0ab045a1c14b
MD5 c4e1f1d2c4ec0c190b07ac165c108f06
SHA1 56431b6e884127f06689d4f2ec0aa3e896220b48
SHA512 3f042f744bc02aa751aa49520d7ebe3448c7f74cf428c9b52eedc499413cfa32b84f1f78d67f366e24e9f4912cf67d7b645e86378d911cd2d4803d6747dae200
SSDEEP 3072:27uZwOuz/xS3iGpZMhDEXzkOSUUKeF8a7bXxBgW4gff:lwBxE1+ijiBK4
TLSH
T1F5F34B68961D8416E88C09746C1317695AF27C3C6F2DCA2F9744FF2D287B3D87AC960B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2760 wrote to memory of 4936	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	80
PID 2760 wrote to memory of 4216	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	81
PID 2760 wrote to memory of 4552	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	82
PID 2760 wrote to memory of 4192	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	83
PID 2760 wrote to memory of 3960	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	84
PID 2760 wrote to memory of 2280	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	85
PID 2760 wrote to memory of 3912	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	86
PID 2760 wrote to memory of 2568	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	87
PID 2760 wrote to memory of 1812	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	88
PID 2760 wrote to memory of 5032	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	89
PID 2760 wrote to memory of 3924	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	90
PID 2760 wrote to memory of 3816	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	91
PID 2760 wrote to memory of 3868	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	92
PID 2760 wrote to memory of 2260	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	93
PID 2760 wrote to memory of 2492	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	94
PID 2760 wrote to memory of 2564	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	95
PID 2760 wrote to memory of 3296	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	96
PID 2760 wrote to memory of 2420	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	97
PID 2760 wrote to memory of 5016	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	98
PID 2760 wrote to memory of 2300	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	99
PID 2760 wrote to memory of 2400	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	100
PID 2760 wrote to memory of 2524	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	101
PID 2760 wrote to memory of 4404	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	102
PID 2760 wrote to memory of 2928	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	103
PID 2760 wrote to memory of 3752	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	104
PID 2760 wrote to memory of 4072	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	105
PID 2760 wrote to memory of 3744	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	106
PID 2760 wrote to memory of 3540	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	107
PID 2760 wrote to memory of 4596	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	108
PID 2760 wrote to memory of 3236	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	109
PID 2760 wrote to memory of 1020	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	110
PID 2760 wrote to memory of 4408	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	111
PID 2760 wrote to memory of 3636	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	112
PID 2760 wrote to memory of 3308	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	113
PID 2760 wrote to memory of 4824	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	114
PID 2760 wrote to memory of 3468	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	115
PID 2760 wrote to memory of 1588	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	116
PID 2760 wrote to memory of 3252	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	117
PID 2760 wrote to memory of 4568	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	118
PID 2760 wrote to memory of 1056	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	119
PID 2760 wrote to memory of 3716	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	120
PID 2760 wrote to memory of 3472	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	121
PID 2760 wrote to memory of 3244	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	122
PID 2760 wrote to memory of 3952	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	123
PID 2760 wrote to memory of 4976	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	124
PID 2760 wrote to memory of 4412	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	125
PID 2760 wrote to memory of 8	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	126
PID 2760 wrote to memory of 5056	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	127
PID 2760 wrote to memory of 4564	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	128
PID 2760 wrote to memory of 2336	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	129
PID 2760 wrote to memory of 560	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	130
PID 2760 wrote to memory of 2496	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	131
PID 2760 wrote to memory of 3600	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	132
PID 2760 wrote to memory of 3724	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	133
PID 2760 wrote to memory of 4576	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	134
PID 2760 wrote to memory of 1132	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	135
PID 2760 wrote to memory of 2988	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	136
PID 2760 wrote to memory of 3652	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	137
PID 2760 wrote to memory of 3336	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	138
PID 2760 wrote to memory of 4944	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	139
PID 2760 wrote to memory of 4108	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	140
PID 2760 wrote to memory of 2500	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	141
PID 2760 wrote to memory of 4040	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	142
PID 2760 wrote to memory of 1980	2760	2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe	143

C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2760
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4936
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4216
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4552
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4192
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3960
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2280
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3912
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2568
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1812
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:5032
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3924
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3816
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3868
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2260
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2492
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2564
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3296
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2420
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:5016
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2300
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2400
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2524
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4404
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2928
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3752
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4072
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3744
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3540
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4596
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3236
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1020
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4408
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3636
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3308
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4824
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3468
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1588
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3252
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4568
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1056
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3716
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3472
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3244
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3952
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4976
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4412
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:8
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:5056
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4564
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2336
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:560
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2496
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3600
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3724
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4576
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1132
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2988
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3652
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3336
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4944
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4108
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2500
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4040
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1980
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4872
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3144
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3212
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2252
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1616
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:888
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4104
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3188
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:612
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:880
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3944
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3580
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4236
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:708
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2860
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4396
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:984
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:584
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3628
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3280
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1724
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4864
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1108
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1632
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:5036
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:392
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1076
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:780
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3204
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1300
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3492
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:5004
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4656
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3844
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1040
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3160
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3928
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1744
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:424
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1204
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1752
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:5048
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1904
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3544
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1448
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:5024
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:772
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3444
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1992
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4060
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1232
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3276
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:856
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1444
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2796
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1228
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1628
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:228
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:236
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:240
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4616
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4592
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:108
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4600
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:488
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4716
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2052
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3348
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1736
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4340
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3748
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4844
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1640
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4792
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3696
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1808
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1656
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1620
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1284
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1492
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1964
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:980
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:884
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3920
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2056
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4956
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4732
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1452
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:460
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:464
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1412
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1392
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1120
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2884
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4644
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2596
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4868
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1192
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2196
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1676
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3892
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4484
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4804
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4424
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4016
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:5088
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4984
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:652
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1848
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4752
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2136
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3632
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:5112
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1200
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1032
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1888
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1012
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1036
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3948
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4524
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1768
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4212
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:1720
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4052
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2612
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4728
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3200
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2268
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:2108
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4756
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4856
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3872
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:3360
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4476
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4032
- C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  C:\Users\Admin\AppData\Local\Temp\2026-05-23_c4e1f1d2c4ec0c190b07ac165c108f06_elex_wannacry.exe
  2⤵
  PID:4968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2760-0-0x0000000000A60000-0x0000000000A65000-memory.dmp

Download