7a4331c48b382fd3abeebe1e766454d43d479edd9a40df6a5891bdb1ce1a8606

Analysis

max time kernel
150s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/06/2026, 01:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Size 26.1MB
Sample260602-b4azcaay4y
SHA256 7a4331c48b382fd3abeebe1e766454d43d479edd9a40df6a5891bdb1ce1a8606
MD5 660d3f2d79603a770b35257212e46b92
SHA1 f342235bb8feed6a651aeaf4e0c76b42e410ee74
SHA512 06ff0ccdb5a710f4d95da2d0f53c4b483a8586f06eff0b366641233278d1d7292ea9fc3b641f336521a7dbb2628ef4bf57316881e10325743ce8427cdf1c625b
SSDEEP 196608:O1rbMRGJhpFUM6jZ5BlBD9cp3Se922Asz0TeUWGhiO10aI6HMaJTtGbU:O1rcGpOjZ5BlBe3rl+kOZ
TLSH
T164572896B2A807D6F3A6D6345175A133E6B27C1E1711E23B0D38F10ADEB73806D19F26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

persistence

Malware Config

Signatures

Custom signature

Detects Windows executables referencing non-Windows User-Agents 4 IoCs

resource	yara_rule
behavioral2/files/0x001c00000002b4c6-2.dat	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA
behavioral2/memory/1312-5-0x00000000005D0000-0x00000000005E6000-memory.dmp	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA
behavioral2/files/0x001900000002b4da-11.dat	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA
behavioral2/files/0x001900000002b4d7-19.dat	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Executes dropped EXE 26 IoCs

pid	Process
1312	audiodg.exe
2648	shost.exe
1948	2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm..exe
1132	audiodg.exe
4788	audiodg.exe
4332	shost.exe
4220	audiodg.exe
5092	shost.exe
4052	audiodg.exe
3568	shost.exe
4616	audiodg.exe
2548	shost.exe
2540	2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm...exe
4244	shost.exe
1596	audiodg.exe
4984	audiodg.exe
3820	shost.exe
1696	shost.exe
2380	audiodg.exe
2156	audiodg.exe
4208	shost.exe
1444	shost.exe
1196	audiodg.exe
484	audiodg.exe
784	shost.exe
480	shost.exe

Modifies system executable filetype association 2 TTPs 36 IoCs

persistence

Modify Registry

T1112

Change Default File Association

T1546.001

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm..exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm..exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm..exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe

Modifies registry class 36 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm..exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm..exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm..exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 2704 wrote to memory of 1312	2704	2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe	80
PID 2704 wrote to memory of 2648	2704	2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe	84
PID 2704 wrote to memory of 1948	2704	2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe	85
PID 2648 wrote to memory of 1132	2648	shost.exe	646
PID 1948 wrote to memory of 4788	1948	2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm..exe	1275
PID 2648 wrote to memory of 4332	2648	shost.exe	88
PID 4332 wrote to memory of 4220	4332	shost.exe	1188
PID 4332 wrote to memory of 5092	4332	shost.exe	92
PID 5092 wrote to memory of 4052	5092	shost.exe	474
PID 5092 wrote to memory of 3568	5092	shost.exe	97
PID 3568 wrote to memory of 4616	3568	shost.exe	2465
PID 1948 wrote to memory of 2548	1948	2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm..exe	101
PID 1948 wrote to memory of 2540	1948	2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm..exe	1235
PID 3568 wrote to memory of 4244	3568	shost.exe	103
PID 2548 wrote to memory of 1596	2548	shost.exe	1112
PID 4244 wrote to memory of 4984	4244	shost.exe	811
PID 2548 wrote to memory of 3820	2548	shost.exe	109
PID 4244 wrote to memory of 1696	4244	shost.exe	110
PID 3820 wrote to memory of 2380	3820	shost.exe	961
PID 1696 wrote to memory of 2156	1696	shost.exe	962
PID 3820 wrote to memory of 4208	3820	shost.exe	114
PID 1696 wrote to memory of 1444	1696	shost.exe	115
PID 4208 wrote to memory of 1196	4208	shost.exe	1092
PID 1444 wrote to memory of 484	1444	shost.exe	730
PID 4208 wrote to memory of 784	4208	shost.exe	120
PID 1444 wrote to memory of 480	1444	shost.exe	124

C:\Users\Admin\AppData\Local\Temp\2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe"
1⤵
- Modifies system executable filetype association
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:2704
- C:\Users\Admin\Documents\diagnostics\audiodg.exe
  "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
  2⤵
  - Executes dropped EXE
  PID:1312
- C:\Users\Admin\Documents\diagnostics\shost.exe
  "C:\Users\Admin\Documents\diagnostics\shost.exe"
  2⤵
  - Executes dropped EXE
  - Modifies system executable filetype association
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:2648
- - C:\Users\Admin\Documents\diagnostics\audiodg.exe
    "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
    3⤵
    - Executes dropped EXE
    PID:1132
- - C:\Users\Admin\Documents\diagnostics\shost.exe
    "C:\Users\Admin\Documents\diagnostics\shost.exe"
    3⤵
    - Executes dropped EXE
    - Modifies system executable filetype association
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:4332
  - - C:\Users\Admin\Documents\diagnostics\audiodg.exe
      "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
      4⤵
      Executes dropped EXE
      PID:4220
  - - C:\Users\Admin\Documents\diagnostics\shost.exe
      "C:\Users\Admin\Documents\diagnostics\shost.exe"
      4⤵
      Executes dropped EXE
      Modifies system executable filetype association
      Modifies registry class
      Suspicious use of WriteProcessMemory
      PID:5092
    - - C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        5⤵
        Executes dropped EXE
        
        PID:4052
    - - C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        5⤵
        Executes dropped EXE
        Modifies system executable filetype association
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:3568
      - C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        6⤵
        Executes dropped EXE
        
        PID:4616
      - C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        6⤵
        Executes dropped EXE
        Modifies system executable filetype association
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:4244
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        7⤵
        Executes dropped EXE
        
        PID:4984
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        7⤵
        Executes dropped EXE
        Modifies system executable filetype association
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:1696
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        8⤵
        Executes dropped EXE
        
        PID:2156
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        8⤵
        Executes dropped EXE
        Modifies system executable filetype association
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:1444
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        9⤵
        Executes dropped EXE
        
        PID:484
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        9⤵
        Executes dropped EXE
        
        PID:480
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        10⤵
        
        PID:2468
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        10⤵
        
        PID:2376
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        11⤵
        
        PID:4284
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        11⤵
        
        PID:3796
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        12⤵
        
        PID:4800
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        12⤵
        
        PID:2544
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        13⤵
        
        PID:3012
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        13⤵
        
        PID:3620
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        14⤵
        
        PID:2904
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        14⤵
        
        PID:2300
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        15⤵
        
        PID:5072
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        15⤵
        
        PID:3052
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        16⤵
        
        PID:3840
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        16⤵
        
        PID:4568
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        17⤵
        
        PID:5040
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        17⤵
        
        PID:2312
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        18⤵
        
        PID:4988
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        18⤵
        
        PID:3092
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        19⤵
        
        PID:3756
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        19⤵
        
        PID:992
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        20⤵
        
        PID:3216
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        20⤵
        
        PID:4840
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        21⤵
        
        PID:4456
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        21⤵
        
        PID:4740
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        22⤵
        
        PID:2220
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        22⤵
        
        PID:2452
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        23⤵
        
        PID:1964
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        23⤵
        
        PID:2412
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        24⤵
        
        PID:2176
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        24⤵
        
        PID:3248
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        25⤵
        
        PID:4356
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        25⤵
        
        PID:656
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        26⤵
        
        PID:3176
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        26⤵
        
        PID:4068
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        27⤵
        
        PID:4932
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        27⤵
        
        PID:4008
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        28⤵
        
        PID:2332
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        28⤵
        
        PID:4936
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        29⤵
        
        PID:2592
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        29⤵
        
        PID:4216
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        30⤵
        
        PID:2484
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        30⤵
        
        PID:2868
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        31⤵
        
        PID:4636
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        31⤵
        
        PID:3216
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        32⤵
        
        PID:2456
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        32⤵
        
        PID:3908
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        33⤵
        
        PID:804
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        33⤵
        
        PID:2244
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        34⤵
        
        PID:876
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        34⤵
        
        PID:808
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        35⤵
        
        PID:1628
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        35⤵
        
        PID:3120
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        36⤵
        
        PID:4780
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        36⤵
        
        PID:2416
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        37⤵
        
        PID:1348
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        37⤵
        
        PID:224
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        38⤵
        
        PID:2628
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        38⤵
        
        PID:1732
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        39⤵
        
        PID:4196
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        39⤵
        
        PID:2176
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        40⤵
        
        PID:2540
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        40⤵
        
        PID:3312
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        41⤵
        
        PID:3452
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        41⤵
        
        PID:3964
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        42⤵
        
        PID:4636
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        42⤵
        
        PID:2800
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        43⤵
        
        PID:5032
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        43⤵
        
        PID:1740
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        44⤵
        
        PID:1792
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        44⤵
        
        PID:3912
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        45⤵
        
        PID:4392
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        45⤵
        
        PID:5036
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        46⤵
        
        PID:2472
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        46⤵
        
        PID:2264
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        47⤵
        
        PID:2900
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        47⤵
        
        PID:3192
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        48⤵
        
        PID:3172
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        48⤵
        
        PID:3548
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        49⤵
        
        PID:2148
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        49⤵
        
        PID:2192
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        50⤵
        
        PID:3356
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        50⤵
        
        PID:5088
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        51⤵
        
        PID:1608
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        51⤵
        
        PID:464
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        52⤵
        
        PID:2032
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        52⤵
        
        PID:1768
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        53⤵
        
        PID:576
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        53⤵
        
        PID:4396
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        54⤵
        
        PID:3640
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        54⤵
        
        PID:1580
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        55⤵
        
        PID:5012
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        55⤵
        
        PID:3352
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        56⤵
        
        PID:4220
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        56⤵
        
        PID:4620
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        57⤵
        
        PID:5052
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        57⤵
        
        PID:3292
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        58⤵
        
        PID:1196
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        58⤵
        
        PID:1332
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        59⤵
        
        PID:468
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        59⤵
        
        PID:3484
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        60⤵
        
        PID:1828
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        60⤵
        
        PID:232
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        61⤵
        
        PID:2152
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        61⤵
        
        PID:580
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        62⤵
        
        PID:3044
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        62⤵
        
        PID:1072
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        63⤵
        
        PID:3452
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        63⤵
        
        PID:3868
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        64⤵
        
        PID:3244
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        64⤵
        
        PID:3160
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        65⤵
        
        PID:4532
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        65⤵
        
        PID:1624
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        66⤵
        
        PID:5028
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        66⤵
        
        PID:2836
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        67⤵
        
        PID:1160
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        67⤵
        
        PID:2964
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        68⤵
        
        PID:2340
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        68⤵
        
        PID:4052
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        69⤵
        
        PID:5008
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        69⤵
        
        PID:912
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        70⤵
        
        PID:1864
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        70⤵
        
        PID:460
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        71⤵
        
        PID:2152
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        71⤵
        
        PID:996
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        72⤵
        
        PID:840
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        72⤵
        
        PID:3440
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        73⤵
        
        PID:4016
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        73⤵
        
        PID:2624
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        74⤵
        
        PID:4196
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        74⤵
        
        PID:3544
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        75⤵
        
        PID:4084
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        75⤵
        
        PID:1668
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        76⤵
        
        PID:3500
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        76⤵
        
        PID:4680
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        77⤵
        
        PID:3244
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        77⤵
        
        PID:4548
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        78⤵
        
        PID:3664
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        78⤵
        
        PID:3920
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        79⤵
        
        PID:3300
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        79⤵
        
        PID:2528
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        80⤵
        
        PID:2428
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        80⤵
        
        PID:3488
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        81⤵
        
        PID:1044
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        81⤵
        
        PID:3156
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        82⤵
        
        PID:2660
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        82⤵
        
        PID:2460
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        83⤵
        
        PID:1476
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        83⤵
        
        PID:1796
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        84⤵
        
        PID:1608
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        84⤵
        
        PID:1784
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        85⤵
        
        PID:3680
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        85⤵
        
        PID:4600
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        86⤵
        
        PID:2088
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        86⤵
        
        PID:3928
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        87⤵
        
        PID:572
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        87⤵
        
        PID:1200
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        88⤵
        
        PID:2292
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        88⤵
        
        PID:1592
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        89⤵
        
        PID:5052
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        89⤵
        
        PID:2424
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        90⤵
        
        PID:2440
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        90⤵
        
        PID:2280
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        91⤵
        
        PID:4336
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        91⤵
        
        PID:4128
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        92⤵
        
        PID:4476
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        92⤵
        
        PID:4064
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        93⤵
        
        PID:1632
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        93⤵
        
        PID:1132
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        94⤵
        
        PID:4412
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        94⤵
        
        PID:3752
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        95⤵
        
        PID:4456
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        95⤵
        
        PID:3748
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        96⤵
        
        PID:3024
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        96⤵
        
        PID:444
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        97⤵
        
        PID:4444
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        97⤵
        
        PID:1568
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        98⤵
        
        PID:4240
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        98⤵
        
        PID:2456
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        99⤵
        
        PID:4232
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        99⤵
        
        PID:3012
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        100⤵
        
        PID:4144
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        100⤵
        
        PID:3128
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        101⤵
        
        PID:5064
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        101⤵
        
        PID:3732
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        102⤵
        
        PID:4168
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        102⤵
        
        PID:3940
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        103⤵
        
        PID:1440
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        103⤵
        
        PID:380
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        104⤵
        
        PID:2508
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        104⤵
        
        PID:4940
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        105⤵
        
        PID:2332
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        105⤵
        
        PID:484
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        106⤵
        
        PID:1052
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        106⤵
        
        PID:5068
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        107⤵
        
        PID:1268
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        107⤵
        
        PID:4468
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        108⤵
        
        PID:1788
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        108⤵
        
        PID:3560
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        109⤵
        
        PID:3824
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        109⤵
        
        PID:4524
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        110⤵
        
        PID:2144
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        110⤵
        
        PID:4592
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        111⤵
        
        PID:1632
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        111⤵
        
        PID:4204
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        112⤵
        
        PID:4788
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        112⤵
        
        PID:3268
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        113⤵
        
        PID:2224
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        113⤵
        
        PID:4560
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        114⤵
        
        PID:4924
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        114⤵
        
        PID:2428
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        115⤵
        
        PID:3452
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        115⤵
        
        PID:1440
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        116⤵
        
        PID:1404
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        116⤵
        
        PID:2492
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        117⤵
        
        PID:1596
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        117⤵
        
        PID:772
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        118⤵
        
        PID:804
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        118⤵
        
        PID:844
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        119⤵
        
        PID:2388
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        119⤵
        
        PID:1968
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        120⤵
        
        PID:4172
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        120⤵
        
        PID:5016
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        121⤵
        
        PID:2396
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        121⤵
        
        PID:1720
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        122⤵
        
        PID:4688
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        122⤵
        
        PID:2360
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        123⤵
        
        PID:2660
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        123⤵
        
        PID:1044
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        124⤵
        
        PID:3924
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        124⤵
        
        PID:2044
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        125⤵
        
        PID:1368
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        125⤵
        
        PID:3172
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        126⤵
        
        PID:4784
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        126⤵
        
        PID:2388
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        127⤵
        
        PID:4988
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        127⤵
        
        PID:4144
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        128⤵
        
        PID:2356
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        128⤵
        
        PID:4636
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        129⤵
        
        PID:2788
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        129⤵
        
        PID:4412
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        130⤵
        
        PID:2232
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        130⤵
        
        PID:1476
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        131⤵
        
        PID:3256
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        131⤵
        
        PID:2728
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        132⤵
        
        PID:3612
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        132⤵
        
        PID:3180
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        133⤵
        
        PID:1724
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        133⤵
        
        PID:4924
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        134⤵
        
        PID:2432
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        134⤵
        
        PID:1984
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        135⤵
        
        PID:1752
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        135⤵
        
        PID:3408
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        136⤵
        
        PID:3624
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        136⤵
        
        PID:4232
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        137⤵
        
        PID:1792
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        137⤵
        
        PID:4148
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        138⤵
        
        PID:4992
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        138⤵
        
        PID:4532
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        139⤵
        
        PID:804
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        139⤵
        
        PID:2156
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        140⤵
        
        PID:2520
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        140⤵
        
        PID:3144
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        141⤵
        
        PID:1724
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        141⤵
        
        PID:1172
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        142⤵
        
        PID:936
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        142⤵
        
        PID:3504
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        143⤵
        
        PID:1608
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        143⤵
        
        PID:5056
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        144⤵
        
        PID:3660
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        144⤵
        
        PID:804
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        145⤵
        
        PID:2088
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        145⤵
        
        PID:2520
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        146⤵
        
        PID:5052
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        146⤵
        
        PID:5008
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        147⤵
        
        PID:3852
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        147⤵
        
        PID:2472
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        148⤵
        
        PID:1836
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        148⤵
        
        PID:1832
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        149⤵
        
        PID:1964
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        149⤵
        
        PID:4484
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        150⤵
        
        PID:4888
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        150⤵
        
        PID:2524
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        151⤵
        
        PID:1404
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        151⤵
        
        PID:4272
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        152⤵
        
        PID:4172
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        152⤵
        
        PID:3924
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        153⤵
        
        PID:1228
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        153⤵
        
        PID:3164
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        154⤵
        
        PID:1836
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        154⤵
        
        PID:2968
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        155⤵
        
        PID:3080
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        155⤵
        
        PID:3624
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        156⤵
        
        PID:4616
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        156⤵
        
        PID:2776
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        157⤵
        
        PID:4168
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        157⤵
        
        PID:2660
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        158⤵
        
        PID:3984
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        158⤵
        
        PID:4832
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        159⤵
        
        PID:776
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        159⤵
        
        PID:1196
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        160⤵
        
        PID:1792
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        160⤵
        
        PID:3512
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        161⤵
        
        PID:2332
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        161⤵
        
        PID:4676
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        162⤵
        
        PID:792
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        162⤵
        
        PID:4980
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        163⤵
        
        PID:1228
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        163⤵
        
        PID:4932
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        164⤵
        
        PID:1348
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        164⤵
        
        PID:2288
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        165⤵
        
        PID:1016
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        165⤵
        
        PID:3112
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        166⤵
        
        PID:2088
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        166⤵
        
        PID:3852
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        167⤵
        
        PID:1516
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        167⤵
        
        PID:4092
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        168⤵
        
        PID:1636
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        168⤵
        
        PID:5048
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        169⤵
        
        PID:1268
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        169⤵
        
        PID:896
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        170⤵
        
        PID:3944
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        170⤵
        
        PID:1800
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        171⤵
        
        PID:4688
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        171⤵
        
        PID:5084
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        172⤵
        
        PID:4032
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        172⤵
        
        PID:3612
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        173⤵
        
        PID:4872
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        173⤵
        
        PID:4220
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        174⤵
        
        PID:1272
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        174⤵
        
        PID:4596
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        175⤵
        
        PID:5012
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        175⤵
        
        PID:2732
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        176⤵
        
        PID:240
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        176⤵
        
        PID:2432
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        177⤵
        
        PID:2592
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        177⤵
        
        PID:3452
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        178⤵
        
        PID:564
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        178⤵
        
        PID:1752
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        179⤵
        
        PID:3984
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        179⤵
        
        PID:2508
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        180⤵
        
        PID:4056
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        180⤵
        
        PID:2900
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        181⤵
        
        PID:1692
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        181⤵
        
        PID:5040
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        182⤵
        
        PID:2032
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        182⤵
        
        PID:1104
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        183⤵
        
        PID:4240
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        183⤵
        
        PID:1588
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        184⤵
        
        PID:2164
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        184⤵
        
        PID:4508
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        185⤵
        
        PID:2592
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        185⤵
        
        PID:352
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        186⤵
        
        PID:4988
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        186⤵
        
        PID:4152
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        187⤵
        
        PID:2484
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        187⤵
        
        PID:2144
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        188⤵
        
        PID:4356
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        188⤵
        
        PID:3896
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        189⤵
        
        PID:4544
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        189⤵
        
        PID:936
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        190⤵
        
        PID:2396
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        190⤵
        
        PID:4992
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        191⤵
        
        PID:2904
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        191⤵
        
        PID:3872
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        192⤵
        
        PID:3824
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        192⤵
        
        PID:3228
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        193⤵
        
        PID:2152
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        193⤵
        
        PID:1108
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        194⤵
        
        PID:4896
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        194⤵
        
        PID:1964
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        195⤵
        
        PID:4460
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        195⤵
        
        PID:4888
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        196⤵
        
        PID:5128
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        196⤵
        
        PID:5228
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        197⤵
        
        PID:5268
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        197⤵
        
        PID:5392
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        198⤵
        
        PID:5444
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        198⤵
        
        PID:5528
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        199⤵
        
        PID:5584
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        199⤵
        
        PID:5676
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        200⤵
        
        PID:5748
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        200⤵
        
        PID:5856
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        201⤵
        
        PID:5912
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        201⤵
        
        PID:5996
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        202⤵
        
        PID:6044
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        202⤵
        
        PID:6136
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        203⤵
        
        PID:2088
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        203⤵
        
        PID:3076
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        204⤵
        
        PID:4896
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        204⤵
        
        PID:5236
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        205⤵
        
        PID:5156
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        205⤵
        
        PID:3936
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        206⤵
        
        PID:4168
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        206⤵
        
        PID:5500
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        207⤵
        
        PID:956
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        207⤵
        
        PID:1792
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        208⤵
        
        PID:5628
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        208⤵
        
        PID:5760
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        209⤵
        
        PID:5896
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        209⤵
        
        PID:5540
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        210⤵
        
        PID:6028
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        210⤵
        
        PID:5916
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        211⤵
        
        PID:6120
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        211⤵
        
        PID:4240
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        212⤵
        
        PID:3660
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        212⤵
        
        PID:1372
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        213⤵
        
        PID:3080
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        213⤵
        
        PID:1448
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        214⤵
        
        PID:5748
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        214⤵
        
        PID:1312
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        215⤵
        
        PID:6096
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        215⤵
        
        PID:5548
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        216⤵
        
        PID:5732
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        216⤵
        
        PID:5796
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        217⤵
        
        PID:5780
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        217⤵
        
        PID:3680
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        218⤵
        
        PID:5664
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        218⤵
        
        PID:5680
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        219⤵
        
        PID:5788
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        219⤵
        
        PID:5944
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        220⤵
        
        PID:5556
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        220⤵
        
        PID:5252
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        221⤵
        
        PID:840
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        221⤵
        
        PID:2228
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        222⤵
        
        PID:4720
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        222⤵
        
        PID:5544
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        223⤵
        
        PID:5348
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        223⤵
        
        PID:5784
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        224⤵
        
        PID:5316
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        224⤵
        
        PID:5828
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        225⤵
        
        PID:5516
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        225⤵
        
        PID:5352
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        226⤵
        
        PID:5240
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        226⤵
        
        PID:5912
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        227⤵
        
        PID:5952
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        227⤵
        
        PID:5244
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        228⤵
        
        PID:1516
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        228⤵
        
        PID:5660
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        229⤵
        
        PID:2904
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        229⤵
        
        PID:4388
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        230⤵
        
        PID:4156
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        230⤵
        
        PID:5764
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        231⤵
        
        PID:5848
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        231⤵
        
        PID:6124
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        232⤵
        
        PID:5672
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        232⤵
        
        PID:5136
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        233⤵
        
        PID:5620
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        233⤵
        
        PID:2988
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        234⤵
        
        PID:5888
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        234⤵
        
        PID:3824
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        235⤵
        
        PID:6132
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        235⤵
        
        PID:4192
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        236⤵
        
        PID:5196
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        236⤵
        
        PID:1348
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        237⤵
        
        PID:6056
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        237⤵
        
        PID:5700
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        238⤵
        
        PID:5488
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        238⤵
        
        PID:5688
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        239⤵
        
        PID:5176
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        239⤵
        
        PID:6000
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        240⤵
        
        PID:5212
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        240⤵
        
        PID:5684
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        241⤵
        
        PID:5588
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        241⤵
        
        PID:5604
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        242⤵
        
        PID:5404
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        242⤵
        
        PID:5220
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        243⤵
        
        PID:5400
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        243⤵
        
        PID:5496
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        244⤵
        
        PID:5732
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        244⤵
        
        PID:968
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        245⤵
        
        PID:5928
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        245⤵
        
        PID:5696
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        246⤵
        
        PID:956
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        246⤵
        
        PID:5576
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        247⤵
        
        PID:5064
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        247⤵
        
        PID:3692
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        248⤵
        
        PID:5188
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        248⤵
        
        PID:5012
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        249⤵
        
        PID:4688
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        249⤵
        
        PID:5520
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        250⤵
        
        PID:6020
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        250⤵
        
        PID:5296
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        251⤵
        
        PID:5724
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        251⤵
        
        PID:5972
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        252⤵
        
        PID:5844
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        252⤵
        
        PID:5860
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        253⤵
        
        PID:5864
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        253⤵
        
        PID:5508
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        254⤵
        
        PID:5376
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        254⤵
        
        PID:5320
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        255⤵
        
        PID:6028
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        255⤵
        
        PID:5348
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        256⤵
        
        PID:6052
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        256⤵
        
        PID:5416
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        257⤵
        
        PID:5316
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        257⤵
        
        PID:5568
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        258⤵
        
        PID:5288
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        258⤵
        
        PID:6084
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        259⤵
        
        PID:5728
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        259⤵
        
        PID:5144
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        260⤵
        
        PID:5904
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        260⤵
        
        PID:5240
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        261⤵
        
        PID:4032
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        261⤵
        
        PID:5624
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        262⤵
        
        PID:5148
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        262⤵
        
        PID:5584
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        263⤵
        
        PID:1724
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        263⤵
        
        PID:4860
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        264⤵
        
        PID:5340
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        264⤵
        
        PID:5276
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        265⤵
        
        PID:5196
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        265⤵
        
        PID:4720
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        266⤵
        
        PID:5952
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        266⤵
        
        PID:5948
- C:\Users\Admin\AppData\Local\Temp\2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm..exe
  "C:\Users\Admin\AppData\Local\Temp\2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm..exe"
  2⤵
  - Executes dropped EXE
  - Modifies system executable filetype association
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:1948
- - C:\Users\Admin\Documents\diagnostics\audiodg.exe
    "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
    3⤵
    - Executes dropped EXE
    PID:4788
- - C:\Users\Admin\Documents\diagnostics\shost.exe
    "C:\Users\Admin\Documents\diagnostics\shost.exe"
    3⤵
    - Executes dropped EXE
    - Modifies system executable filetype association
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:2548
  - - C:\Users\Admin\Documents\diagnostics\audiodg.exe
      "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
      4⤵
      Executes dropped EXE
      PID:1596
  - - C:\Users\Admin\Documents\diagnostics\shost.exe
      "C:\Users\Admin\Documents\diagnostics\shost.exe"
      4⤵
      Executes dropped EXE
      Modifies system executable filetype association
      Modifies registry class
      Suspicious use of WriteProcessMemory
      PID:3820
    - - C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        5⤵
        Executes dropped EXE
        
        PID:2380
    - - C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        5⤵
        Executes dropped EXE
        Modifies system executable filetype association
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:4208
      - C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        6⤵
        Executes dropped EXE
        
        PID:1196
      - C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        6⤵
        Executes dropped EXE
        
        PID:784
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        7⤵
        
        PID:1396
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        7⤵
        
        PID:4340
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        8⤵
        
        PID:3940
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        8⤵
        
        PID:2140
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        9⤵
        
        PID:4904
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        9⤵
        
        PID:3580
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        10⤵
        
        PID:5008
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        10⤵
        
        PID:2848
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        11⤵
        
        PID:4600
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        11⤵
        
        PID:2284
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        12⤵
        
        PID:3924
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        12⤵
        
        PID:2516
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        13⤵
        
        PID:4196
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        13⤵
        
        PID:4552
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        14⤵
        
        PID:3112
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        14⤵
        
        PID:3000
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        15⤵
        
        PID:3560
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        15⤵
        
        PID:5116
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        16⤵
        
        PID:1052
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        16⤵
        
        PID:3788
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        17⤵
        
        PID:2144
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        17⤵
        
        PID:3592
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        18⤵
        
        PID:1192
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        18⤵
        
        PID:760
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        19⤵
        
        PID:4592
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        19⤵
        
        PID:3236
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        20⤵
        
        PID:232
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        20⤵
        
        PID:4028
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        21⤵
        
        PID:2228
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        21⤵
        
        PID:4772
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        22⤵
        
        PID:4336
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        22⤵
        
        PID:2124
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        23⤵
        
        PID:1624
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        23⤵
        
        PID:2220
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        24⤵
        
        PID:1176
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        24⤵
        
        PID:4284
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        25⤵
        
        PID:3920
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        25⤵
        
        PID:2480
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        26⤵
        
        PID:1752
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        26⤵
        
        PID:1544
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        27⤵
        
        PID:4180
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        27⤵
        
        PID:4176
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        28⤵
        
        PID:1832
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        28⤵
        
        PID:4276
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        29⤵
        
        PID:1596
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        29⤵
        
        PID:1728
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        30⤵
        
        PID:3680
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        30⤵
        
        PID:2368
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        31⤵
        
        PID:2352
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        31⤵
        
        PID:3208
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        32⤵
        
        PID:460
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        32⤵
        
        PID:4000
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        33⤵
        
        PID:2144
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        33⤵
        
        PID:1744
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        34⤵
        
        PID:2356
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        34⤵
        
        PID:3756
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        35⤵
        
        PID:3080
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        35⤵
        
        PID:900
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        36⤵
        
        PID:3604
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        36⤵
        
        PID:4120
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        37⤵
        
        PID:4800
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        37⤵
        
        PID:3392
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        38⤵
        
        PID:1976
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        38⤵
        
        PID:3836
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        39⤵
        
        PID:2292
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        39⤵
        
        PID:408
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        40⤵
        
        PID:4044
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        40⤵
        
        PID:3360
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        41⤵
        
        PID:4116
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        41⤵
        
        PID:4556
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        42⤵
        
        PID:3624
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        42⤵
        
        PID:2936
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        43⤵
        
        PID:4292
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        43⤵
        
        PID:2588
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        44⤵
        
        PID:2732
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        44⤵
        
        PID:2532
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        45⤵
        
        PID:1632
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        45⤵
        
        PID:3356
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        46⤵
        
        PID:3608
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        46⤵
        
        PID:1192
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        47⤵
        
        PID:2988
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        47⤵
        
        PID:2120
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        48⤵
        
        PID:4144
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        48⤵
        
        PID:4780
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        49⤵
        
        PID:4888
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        49⤵
        
        PID:4116
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        50⤵
        
        PID:3852
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        50⤵
        
        PID:2084
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        51⤵
        
        PID:3156
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        51⤵
        
        PID:3840
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        52⤵
        
        PID:3748
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        52⤵
        
        PID:920
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        53⤵
        
        PID:4128
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        53⤵
        
        PID:4800
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        54⤵
        
        PID:1056
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        54⤵
        
        PID:3904
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        55⤵
        
        PID:2388
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        55⤵
        
        PID:1776
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        56⤵
        
        PID:4600
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        56⤵
        
        PID:2680
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        57⤵
        
        PID:4784
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        57⤵
        
        PID:4044
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        58⤵
        
        PID:3940
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        58⤵
        
        PID:2348
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        59⤵
        
        PID:2904
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        59⤵
        
        PID:2340
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        60⤵
        
        PID:3944
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        60⤵
        
        PID:1176
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        61⤵
        
        PID:752
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        61⤵
        
        PID:4604
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        62⤵
        
        PID:1204
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        62⤵
        
        PID:1628
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        63⤵
        
        PID:2788
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        63⤵
        
        PID:4856
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        64⤵
        
        PID:1828
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        64⤵
        
        PID:4084
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        65⤵
        
        PID:3852
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        65⤵
        
        PID:4948
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        66⤵
        
        PID:3180
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        66⤵
        
        PID:940
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        67⤵
        
        PID:3612
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        67⤵
        
        PID:4912
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        68⤵
        
        PID:4832
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        68⤵
        
        PID:1820
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        69⤵
        
        PID:4148
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        69⤵
        
        PID:2352
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        70⤵
        
        PID:4980
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        70⤵
        
        PID:4884
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        71⤵
        
        PID:1800
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        71⤵
        
        PID:576
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        72⤵
        
        PID:2788
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        72⤵
        
        PID:1828
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        73⤵
        
        PID:1396
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        73⤵
        
        PID:4908
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        74⤵
        
        PID:3872
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        74⤵
        
        PID:3244
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        75⤵
        
        PID:1636
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        75⤵
        
        PID:3948
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        76⤵
        
        PID:2732
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        76⤵
        
        PID:764
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        77⤵
        
        PID:3172
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        77⤵
        
        PID:2948
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        78⤵
        
        PID:2904
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        78⤵
        
        PID:752
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        79⤵
        
        PID:4196
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        79⤵
        
        PID:4292
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        80⤵
        
        PID:3188
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        80⤵
        
        PID:2980
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        81⤵
        
        PID:2328
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        81⤵
        
        PID:1864
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        82⤵
        
        PID:1180
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        82⤵
        
        PID:3252
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        83⤵
        
        PID:776
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        83⤵
        
        PID:4184
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        84⤵
        
        PID:3396
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        84⤵
        
        PID:3344
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        85⤵
        
        PID:3996
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        85⤵
        
        PID:540
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        86⤵
        
        PID:3388
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        86⤵
        
        PID:2784
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        87⤵
        
        PID:844
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        87⤵
        
        PID:1084
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        88⤵
        
        PID:4616
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        88⤵
        
        PID:3952
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        89⤵
        
        PID:3144
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        89⤵
        
        PID:1120
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        90⤵
        
        PID:5072
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        90⤵
        
        PID:2180
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        91⤵
        
        PID:2968
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        91⤵
        
        PID:3396
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        92⤵
        
        PID:1964
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        92⤵
        
        PID:3284
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        93⤵
        
        PID:2444
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        93⤵
        
        PID:3812
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        94⤵
        
        PID:1636
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        94⤵
        
        PID:1972
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        95⤵
        
        PID:1152
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        95⤵
        
        PID:2960
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        96⤵
        
        PID:4688
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        96⤵
        
        PID:1788
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        97⤵
        
        PID:1064
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        97⤵
        
        PID:2608
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        98⤵
        
        PID:776
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        98⤵
        
        PID:4984
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        99⤵
        
        PID:1368
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        99⤵
        
        PID:2112
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        100⤵
        
        PID:4232
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        100⤵
        
        PID:3956
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        101⤵
        
        PID:3936
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        101⤵
        
        PID:1256
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        102⤵
        
        PID:4980
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        102⤵
        
        PID:4196
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        103⤵
        
        PID:3640
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        103⤵
        
        PID:4160
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        104⤵
        
        PID:4456
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        104⤵
        
        PID:4920
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        105⤵
        
        PID:4996
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        105⤵
        
        PID:1160
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        106⤵
        
        PID:3256
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        106⤵
        
        PID:3024
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        107⤵
        
        PID:1268
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        107⤵
        
        PID:3576
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        108⤵
        
        PID:4356
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        108⤵
        
        PID:4500
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        109⤵
        
        PID:4168
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        109⤵
        
        PID:960
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        110⤵
        
        PID:3112
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        110⤵
        
        PID:3604
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        111⤵
        
        PID:956
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        111⤵
        
        PID:4016
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        112⤵
        
        PID:3228
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        112⤵
        
        PID:3300
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        113⤵
        
        PID:1052
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        113⤵
        
        PID:2584
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        114⤵
        
        PID:1368
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        114⤵
        
        PID:1632
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        115⤵
        
        PID:2344
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        115⤵
        
        PID:3500
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        116⤵
        
        PID:3436
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        116⤵
        
        PID:2440
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        117⤵
        
        PID:2752
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        117⤵
        
        PID:5004
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        118⤵
        
        PID:3164
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        118⤵
        
        PID:468
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        119⤵
        
        PID:1448
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        119⤵
        
        PID:2380
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        120⤵
        
        PID:4988
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        120⤵
        
        PID:1368
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        121⤵
        
        PID:2656
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        121⤵
        
        PID:2724
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        122⤵
        
        PID:2484
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        122⤵
        
        PID:1056
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        123⤵
        
        PID:1312
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        123⤵
        
        PID:1116
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        124⤵
        
        PID:2732
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        124⤵
        
        PID:560
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        125⤵
        
        PID:4980
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        125⤵
        
        PID:4180
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        126⤵
        
        PID:4788
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        126⤵
        
        PID:3664
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        127⤵
        
        PID:2904
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        127⤵
        
        PID:1152
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        128⤵
        
        PID:2144
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        128⤵
        
        PID:3188
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        129⤵
        
        PID:4564
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        129⤵
        
        PID:3640
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        130⤵
        
        PID:2232
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        130⤵
        
        PID:5072
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        131⤵
        
        PID:2504
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        131⤵
        
        PID:2344
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        132⤵
        
        PID:3076
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        132⤵
        
        PID:4516
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        133⤵
        
        PID:5048
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        133⤵
        
        PID:1396
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        134⤵
        
        PID:3452
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        134⤵
        
        PID:1608
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        135⤵
        
        PID:1236
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        135⤵
        
        PID:4996
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        136⤵
        
        PID:1844
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        136⤵
        
        PID:1052
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        137⤵
        
        PID:3044
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        137⤵
        
        PID:3232
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        138⤵
        
        PID:1372
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        138⤵
        
        PID:3388
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        139⤵
        
        PID:1640
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        139⤵
        
        PID:1180
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        140⤵
        
        PID:936
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        140⤵
        
        PID:4784
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        141⤵
        
        PID:4688
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        141⤵
        
        PID:1596
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        142⤵
        
        PID:2900
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        142⤵
        
        PID:5032
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        143⤵
        
        PID:1312
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        143⤵
        
        PID:3744
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        144⤵
        
        PID:4172
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        144⤵
        
        PID:3436
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        145⤵
        
        PID:4720
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        145⤵
        
        PID:2068
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        146⤵
        
        PID:2832
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        146⤵
        
        PID:1064
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        147⤵
        
        PID:2992
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        147⤵
        
        PID:2464
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        148⤵
        
        PID:3660
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        148⤵
        
        PID:1836
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        149⤵
        
        PID:5064
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        149⤵
        
        PID:2504
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        150⤵
        
        PID:4444
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        150⤵
        
        PID:4172
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        151⤵
        
        PID:4836
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        151⤵
        
        PID:1016
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        152⤵
        
        PID:876
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        152⤵
        
        PID:4476
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        153⤵
        
        PID:2148
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        153⤵
        
        PID:1844
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        154⤵
        
        PID:2164
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        154⤵
        
        PID:5076
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        155⤵
        
        PID:4616
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        155⤵
        
        PID:4872
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        156⤵
        
        PID:5064
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        156⤵
        
        PID:1320
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        157⤵
        
        PID:4456
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        157⤵
        
        PID:2468
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        158⤵
        
        PID:2228
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        158⤵
        
        PID:2540
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        159⤵
        
        PID:4976
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        159⤵
        
        PID:3984
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        160⤵
        
        PID:4024
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        160⤵
        
        PID:4456
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        161⤵
        
        PID:2396
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        161⤵
        
        PID:1360
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        162⤵
        
        PID:2332
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        162⤵
        
        PID:3044
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        163⤵
        
        PID:4904
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        163⤵
        
        PID:2832
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        164⤵
        
        PID:4720
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        164⤵
        
        PID:4788
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        165⤵
        
        PID:2992
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        165⤵
        
        PID:2232
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        166⤵
        
        PID:4976
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        166⤵
        
        PID:1236
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        167⤵
        
        PID:3256
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        167⤵
        
        PID:1824
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        168⤵
        
        PID:1264
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        168⤵
        
        PID:1268
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        169⤵
        
        PID:2444
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        169⤵
        
        PID:4024
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        170⤵
        
        PID:1792
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        170⤵
        
        PID:3176
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        171⤵
        
        PID:1372
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        171⤵
        
        PID:4904
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        172⤵
        
        PID:684
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        172⤵
        
        PID:876
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        173⤵
        
        PID:2956
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        173⤵
        
        PID:5164
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        174⤵
        
        PID:5212
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        174⤵
        
        PID:5256
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        175⤵
        
        PID:5312
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        175⤵
        
        PID:5420
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        176⤵
        
        PID:5468
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        176⤵
        
        PID:5564
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        177⤵
        
        PID:5628
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        177⤵
        
        PID:5652
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        178⤵
        
        PID:5700
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        178⤵
        
        PID:5824
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        179⤵
        
        PID:5880
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        179⤵
        
        PID:5976
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        180⤵
        
        PID:6008
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        180⤵
        
        PID:6104
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        181⤵
        
        PID:3256
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        181⤵
        
        PID:4336
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        182⤵
        
        PID:564
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        182⤵
        
        PID:4544
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        183⤵
        
        PID:1348
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        183⤵
        
        PID:3944
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        184⤵
        
        PID:4688
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        184⤵
        
        PID:5344
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        185⤵
        
        PID:5372
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        185⤵
        
        PID:5640
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        186⤵
        
        PID:5796
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        186⤵
        
        PID:5736
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        187⤵
        
        PID:5708
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        187⤵
        
        PID:5744
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        188⤵
        
        PID:5688
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        188⤵
        
        PID:5884
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        189⤵
        
        PID:6024
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        189⤵
        
        PID:5968
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        190⤵
        
        PID:5320
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        190⤵
        
        PID:2592
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        191⤵
        
        PID:5140
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        191⤵
        
        PID:2164
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        192⤵
        
        PID:6068
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        192⤵
        
        PID:5232
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        193⤵
        
        PID:6064
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        193⤵
        
        PID:4496
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        194⤵
        
        PID:6048
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        194⤵
        
        PID:4444
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        195⤵
        
        PID:5812
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        195⤵
        
        PID:5932
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        196⤵
        
        PID:5708
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        196⤵
        
        PID:5648
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        197⤵
        
        PID:5896
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        197⤵
        
        PID:6112
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        198⤵
        
        PID:5940
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        198⤵
        
        PID:6004
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        199⤵
        
        PID:5480
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        199⤵
        
        PID:5304
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        200⤵
        
        PID:2956
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        200⤵
        
        PID:4708
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        201⤵
        
        PID:5216
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        201⤵
        
        PID:6092
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        202⤵
        
        PID:6040
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        202⤵
        
        PID:4916
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        203⤵
        
        PID:5936
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        203⤵
        
        PID:5512
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        204⤵
        
        PID:5132
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        204⤵
        
        PID:5472
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        205⤵
        
        PID:5212
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        205⤵
        
        PID:5712
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        206⤵
        
        PID:4352
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        206⤵
        
        PID:5208
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        207⤵
        
        PID:5628
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        207⤵
        
        PID:5748
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        208⤵
        
        PID:5592
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        208⤵
        
        PID:2224
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        209⤵
        
        PID:1692
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        209⤵
        
        PID:3256
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        210⤵
        
        PID:1272
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        210⤵
        
        PID:5868
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        211⤵
        
        PID:5380
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        211⤵
        
        PID:5892
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        212⤵
        
        PID:5960
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        212⤵
        
        PID:5300
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        213⤵
        
        PID:5576
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        213⤵
        
        PID:5992
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        214⤵
        
        PID:5520
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        214⤵
        
        PID:5360
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        215⤵
        
        PID:5332
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        215⤵
        
        PID:2316
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        216⤵
        
        PID:4536
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        216⤵
        
        PID:5368
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        217⤵
        
        PID:3608
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        217⤵
        
        PID:5384
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        218⤵
        
        PID:5804
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        218⤵
        
        PID:5572
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        219⤵
        
        PID:5484
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        219⤵
        
        PID:5836
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        220⤵
        
        PID:3932
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        220⤵
        
        PID:1976
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        221⤵
        
        PID:5280
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        221⤵
        
        PID:4356
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        222⤵
        
        PID:5412
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        222⤵
        
        PID:2436
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        223⤵
        
        PID:6056
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        223⤵
        
        PID:5816
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        224⤵
        
        PID:5888
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        224⤵
        
        PID:5668
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        225⤵
        
        PID:6108
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        225⤵
        
        PID:5328
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        226⤵
        
        PID:6068
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        226⤵
        
        PID:2152
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        227⤵
        
        PID:5920
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        227⤵
        
        PID:6024
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        228⤵
        
        PID:5768
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        228⤵
        
        PID:5716
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        229⤵
        
        PID:5592
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        229⤵
        
        PID:776
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        230⤵
        
        PID:6012
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        230⤵
        
        PID:6128
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        231⤵
        
        PID:5152
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        231⤵
        
        PID:5928
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        232⤵
        
        PID:5336
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        232⤵
        
        PID:5656
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        233⤵
        
        PID:5372
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        233⤵
        
        PID:2396
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        234⤵
        
        PID:5400
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        234⤵
        
        PID:572
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        235⤵
        
        PID:2628
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        235⤵
        
        PID:4056
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        236⤵
        
        PID:564
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        236⤵
        
        PID:5388
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        237⤵
        
        PID:4896
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        237⤵
        
        PID:5900
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        238⤵
        
        PID:2484
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        238⤵
        
        PID:3080
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        239⤵
        
        PID:5424
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        239⤵
        
        PID:5596
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        240⤵
        
        PID:2992
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        240⤵
        
        PID:5752
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        241⤵
        
        PID:5792
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        241⤵
        
        PID:2356
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        242⤵
        
        PID:6060
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        242⤵
        
        PID:5532
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        243⤵
        
        PID:5324
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        243⤵
        
        PID:5364
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        244⤵
        
        PID:5316
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        244⤵
        
        PID:1636
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        245⤵
        
        PID:4168
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        245⤵
        
        PID:5524
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        246⤵
        
        PID:3456
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        246⤵
        
        PID:2552
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        247⤵
        
        PID:5200
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        247⤵
        
        PID:5484
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        248⤵
        
        PID:5904
- - C:\Users\Admin\AppData\Local\Temp\2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm...exe
    "C:\Users\Admin\AppData\Local\Temp\2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm...exe"
    3⤵
    - Executes dropped EXE
    PID:2540

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Change Default File Association

T1546.001

Privilege Escalation

Event Triggered Execution

T1546

Change Default File Association

T1546.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm...exe

Path C:\Users\Admin\AppData\Local\Temp\2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm...exe
Size 25.4MB
SHA256 54b4d6f05fd5e17a161c40736f1986371192c3498e15f627cbff1f51cad48964
MD5 5118fe0dfdf675bc4fe0144613face7b
SHA1 914fc2395b55324d72703b12e2324edbe0f51d0e
SHA512 1a517fc1eb70a1c30715b6a7e382f8562974d0a8d56d73aee3b8edf53984ece859ef99272cd0cf1de203b7bb09174659cc7d1bee90caf59338b0f23f3b77377a
SSDEEP 196608:W1rbMRGJhpFUM6jZ5BlBD9cp3Se922Asz0TeUWGhiO10aI6HMaJTtGbU:W1rcGpOjZ5BlBe3rl+kOZ
TLSH
T17F471796B2A807D2F3A6D6345175A133E6B27C1E1711E23B0D38F50ADEB73806D19F26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm..exe

Path C:\Users\Admin\AppData\Local\Temp\2026-06-02_660d3f2d79603a770b35257212e46b92_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm..exe
Size 25.8MB
SHA256 3af36d1e68a339b1d0978b8392be75da9cd56ec2b459404146c9e6f584a5eff1
MD5 976bcc64ebee100b0d2c519230321e66
SHA1 4f242a2978680b2e5efeeed566b40e7e9d72bc0e
SHA512 c8c7ba929bfc89df3494076ed9fa9c48634393b25bbb65605e43396fcd11a11189dc57d04d3b22c5b9ce209c4e22fbc8cefd76e5cad4a4c76a6e73b6d57da69b
SSDEEP 196608:r1rbMRGJhpFUM6jZ5BlBD9cp3Se922Asz0TeUWGhiO10aI6HMaJTtGbU:r1rcGpOjZ5BlBe3rl+kOZ
TLSH
T10D472796B2A807D6F3A6D6345175A133E6B27C1E1711E23B0D38F10ADEB73806D19F26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

audiodg.exe

Path C:\Users\Admin\Documents\diagnostics\audiodg.exe
Size 62KB
SHA256 191105e595983493dae047841a21444507cc93459c0f9a7bf76155d78a260f71
MD5 bdf5a6c11c895cd516bfbb4fb51fb6c0
SHA1 1419e283abd9fbf0b171d2172340fea0ca97c03d
SHA512 7c6520817770b804785c1079e7cb2dcb1e2d40cce0149b652d2d11095c03ff344a0e488351b3900a225567e7684eebfcaa9dca897e6270060d4179d6c215b54b
SSDEEP 1536:QiA/msOFA3asSkD6nFHbAkExJO1EA+Bdd:Qz/msHasdDOFHbAkExJO1Ebdd
TLSH
T177535C18BBE54129F4BFAF7158F53262EB3DF6736903866F248902871A22985CD406FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shost.exe

Path C:\Users\Admin\Documents\diagnostics\shost.exe
Size 377KB
SHA256 a182ba772bdd57155257e81bb12983c8dd8093d3674ed0ac1c94cf29a14dc953
MD5 6fb33b7f3967d5c9c4b8bfff087b43f4
SHA1 8fc4fd3b64384abe5d30ae17b64842d512c38b0e
SHA512 dee9c5f0331448c9b6ad490cb0adf427fdda930fc7b2f107a705937228a80456ee23ba97d2be0e531b81e152022d3467da0f80ec5bd93b0f1acbc7261f81617b
SSDEEP 6144:p+GYnA0zeWsDi5eJziQ8kV3f+RysMFZzN/z/msHOtb6ih8sWrw:pYyDi5eNiQ7uysMFZzN/z/msuF3o
TLSH
T17A848C06F79408FDD4A7C57489A245469A397C9F1B72EADF17C8422A2F237F08E39B50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1312-5-0x00000000005D0000-0x00000000005E6000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads