99345364163a07d42f811f770aae83ea8cd9768d1cce394f31ed6dd8e581a89f

Analysis

user interaction
yes
max time kernel
181s
max time network
181s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
06/07/2026, 19:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
vsscanner.py
Size 16KB
Sample260706-x6bvbact2v
SHA256 99345364163a07d42f811f770aae83ea8cd9768d1cce394f31ed6dd8e581a89f
MD5 682ef94bbbe0f65dd37e693e02b55c7a
SHA1 15e02aa9dad56181f03a3d5e7963bc91e958f114
SHA512 b397863cf493093f936c618c548e486e2871ed1d5ecbe4baa69376fc9b946267b19ec3cd69b50b15758d165e4cc70e7fa9349f6f829c19df288dc9eb75a221f3
SSDEEP 192:I+0+jvTsABJu9UHuUIXfcwPtjWxxrYzKW25E8fjnbTTWt2xcrF6FWAnouwzQSh31:NTsMJg+xXvoNGI9t
TLSH
T1F4726227CD2B9C1893B2C91DAD4A086DFB03036F0E576D2B39BDC25C2F30469919EA5D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery pyinstaller

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
31	4056	chrome.exe

Executes dropped EXE 64 IoCs

pid	Process
4892	protected_universal_loader.exe
4808	protected_universal_loader.exe
1604	protected_universal_loader.exe
1320	protected_universal_loader.exe
3444	protected_universal_loader.exe
2664	protected_universal_loader.exe
3796	protected_universal_loader.exe
3976	protected_universal_loader.exe
1444	protected_universal_loader.exe
4992	protected_universal_loader.exe
4068	protected_universal_loader.exe
3936	protected_universal_loader.exe
3412	protected_universal_loader.exe
4880	protected_universal_loader.exe
1172	protected_universal_loader.exe
1744	protected_universal_loader.exe
5056	protected_universal_loader.exe
1040	protected_universal_loader.exe
4688	protected_universal_loader.exe
2164	protected_universal_loader.exe
4864	protected_universal_loader.exe
2520	protected_universal_loader.exe
800	protected_universal_loader.exe
1624	protected_universal_loader.exe
4168	protected_universal_loader.exe
4236	protected_universal_loader.exe
2332	protected_universal_loader.exe
3220	protected_universal_loader.exe
2964	protected_universal_loader.exe
1752	protected_universal_loader.exe
3960	protected_universal_loader.exe
2220	protected_universal_loader.exe
5044	protected_universal_loader.exe
5068	protected_universal_loader.exe
392	protected_universal_loader.exe
4212	protected_universal_loader.exe
4276	protected_universal_loader.exe
3000	protected_universal_loader.exe
3016	protected_universal_loader.exe
4932	protected_universal_loader.exe
3464	protected_universal_loader.exe
1868	protected_universal_loader.exe
608	protected_universal_loader.exe
4904	protected_universal_loader.exe
3736	protected_universal_loader.exe
4540	protected_universal_loader.exe
3244	protected_universal_loader.exe
3668	protected_universal_loader.exe
2432	protected_universal_loader.exe
1680	protected_universal_loader.exe
1968	protected_universal_loader.exe
2320	protected_universal_loader.exe
4816	protected_universal_loader.exe
5136	protected_universal_loader.exe
5152	protected_universal_loader.exe
5168	protected_universal_loader.exe
5184	protected_universal_loader.exe
5200	protected_universal_loader.exe
5216	protected_universal_loader.exe
5232	protected_universal_loader.exe
5248	protected_universal_loader.exe
5264	protected_universal_loader.exe
5280	protected_universal_loader.exe
5296	protected_universal_loader.exe

Loads dropped DLL 64 IoCs

pid	Process
4808	protected_universal_loader.exe
4808	protected_universal_loader.exe
4808	protected_universal_loader.exe
4808	protected_universal_loader.exe
4808	protected_universal_loader.exe
4808	protected_universal_loader.exe
4808	protected_universal_loader.exe
4808	protected_universal_loader.exe
4808	protected_universal_loader.exe
4808	protected_universal_loader.exe
4808	protected_universal_loader.exe
4808	protected_universal_loader.exe
1604	protected_universal_loader.exe
1604	protected_universal_loader.exe
1604	protected_universal_loader.exe
1604	protected_universal_loader.exe
1604	protected_universal_loader.exe
1604	protected_universal_loader.exe
1604	protected_universal_loader.exe
1604	protected_universal_loader.exe
1604	protected_universal_loader.exe
1604	protected_universal_loader.exe
1604	protected_universal_loader.exe
1604	protected_universal_loader.exe
1320	protected_universal_loader.exe
1320	protected_universal_loader.exe
1320	protected_universal_loader.exe
1320	protected_universal_loader.exe
1320	protected_universal_loader.exe
1320	protected_universal_loader.exe
1320	protected_universal_loader.exe
1320	protected_universal_loader.exe
1320	protected_universal_loader.exe
1320	protected_universal_loader.exe
1320	protected_universal_loader.exe
1320	protected_universal_loader.exe
3444	protected_universal_loader.exe
3444	protected_universal_loader.exe
3444	protected_universal_loader.exe
3444	protected_universal_loader.exe
3444	protected_universal_loader.exe
3444	protected_universal_loader.exe
3444	protected_universal_loader.exe
3444	protected_universal_loader.exe
3444	protected_universal_loader.exe
3444	protected_universal_loader.exe
3444	protected_universal_loader.exe
3444	protected_universal_loader.exe
2664	protected_universal_loader.exe
2664	protected_universal_loader.exe
2664	protected_universal_loader.exe
2664	protected_universal_loader.exe
2664	protected_universal_loader.exe
2664	protected_universal_loader.exe
2664	protected_universal_loader.exe
2664	protected_universal_loader.exe
2664	protected_universal_loader.exe
2664	protected_universal_loader.exe
2664	protected_universal_loader.exe
2664	protected_universal_loader.exe
3796	protected_universal_loader.exe
3796	protected_universal_loader.exe
3796	protected_universal_loader.exe
3796	protected_universal_loader.exe

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	api.gofile.io
24	api.gofile.io

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\protected_universal_loader.exe:Zone.Identifier	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Detects Pyinstaller 1 IoCs

pyinstaller

resource	yara_rule
behavioral1/files/0x000500000002acb6-269.dat	pyinstaller

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4056	chrome.exe

Checks SCSI registry key(s) 3 TTPs 3 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	taskmgr.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134278396673590928"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.WindowsTerminal_8wekyb3d8bbwe\StartTerminalOnLoginTask	taskmgr.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\protected_universal_loader.exe:Zone.Identifier	chrome.exe

Suspicious behavior: EnumeratesProcesses 55 IoCs

pid	Process
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
5456	chrome.exe
5456	chrome.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe
Token: SeShutdownPrivilege	4972	chrome.exe
Token: SeCreatePagefilePrivilege	4972	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe

Suspicious use of SendNotifyMessage 60 IoCs

pid	Process
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
4972	chrome.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe
8284	taskmgr.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4608	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4972 wrote to memory of 436	4972	chrome.exe	84
PID 4972 wrote to memory of 4732	4972	chrome.exe	85
PID 4972 wrote to memory of 4732	4972	chrome.exe	85
PID 4972 wrote to memory of 4056	4972	chrome.exe	86
PID 4972 wrote to memory of 1476	4972	chrome.exe	87
PID 4972 wrote to memory of 1476	4972	chrome.exe	87
PID 4972 wrote to memory of 1496	4972	chrome.exe	88
PID 4972 wrote to memory of 1496	4972	chrome.exe	88
PID 4972 wrote to memory of 1868	4972	chrome.exe	89
PID 4972 wrote to memory of 1868	4972	chrome.exe	89
PID 4972 wrote to memory of 3024	4972	chrome.exe	90
PID 4972 wrote to memory of 3024	4972	chrome.exe	90
PID 4972 wrote to memory of 2220	4972	chrome.exe	93
PID 4972 wrote to memory of 2220	4972	chrome.exe	93
PID 4972 wrote to memory of 1700	4972	chrome.exe	94
PID 4972 wrote to memory of 1700	4972	chrome.exe	94
PID 4972 wrote to memory of 4000	4972	chrome.exe	95
PID 4972 wrote to memory of 4000	4972	chrome.exe	95
PID 4972 wrote to memory of 3820	4972	chrome.exe	96
PID 4972 wrote to memory of 2288	4972	chrome.exe	98
PID 4972 wrote to memory of 2288	4972	chrome.exe	98
PID 4972 wrote to memory of 3000	4972	chrome.exe	99
PID 4972 wrote to memory of 3000	4972	chrome.exe	99
PID 4972 wrote to memory of 4000	4972	chrome.exe	100
PID 4972 wrote to memory of 860	4972	chrome.exe	101
PID 4972 wrote to memory of 2432	4972	chrome.exe	102
PID 4972 wrote to memory of 2584	4972	chrome.exe	103
PID 4972 wrote to memory of 2584	4972	chrome.exe	103
PID 4972 wrote to memory of 3972	4972	chrome.exe	104
PID 4972 wrote to memory of 3972	4972	chrome.exe	104
PID 4972 wrote to memory of 2372	4972	chrome.exe	105
PID 4892 wrote to memory of 4808	4892	protected_universal_loader.exe	109
PID 4808 wrote to memory of 1604	4808	protected_universal_loader.exe	110
PID 1604 wrote to memory of 1320	1604	protected_universal_loader.exe	111
PID 1320 wrote to memory of 3444	1320	protected_universal_loader.exe	112
PID 3444 wrote to memory of 2664	3444	protected_universal_loader.exe	113
PID 2664 wrote to memory of 3796	2664	protected_universal_loader.exe	114
PID 3796 wrote to memory of 3976	3796	protected_universal_loader.exe	115
PID 3976 wrote to memory of 1444	3976	protected_universal_loader.exe	116
PID 1444 wrote to memory of 4992	1444	protected_universal_loader.exe	117
PID 4992 wrote to memory of 4068	4992	protected_universal_loader.exe	118
PID 4068 wrote to memory of 3936	4068	protected_universal_loader.exe	119
PID 3936 wrote to memory of 3412	3936	protected_universal_loader.exe	120
PID 3412 wrote to memory of 4880	3412	protected_universal_loader.exe	121
PID 4880 wrote to memory of 1172	4880	protected_universal_loader.exe	122
PID 1172 wrote to memory of 1744	1172	protected_universal_loader.exe	123
PID 1744 wrote to memory of 5056	1744	protected_universal_loader.exe	124
PID 5056 wrote to memory of 1040	5056	protected_universal_loader.exe	125
PID 1040 wrote to memory of 4688	1040	protected_universal_loader.exe	126
PID 4688 wrote to memory of 2164	4688	protected_universal_loader.exe	127
PID 2164 wrote to memory of 4864	2164	protected_universal_loader.exe	128
PID 4864 wrote to memory of 2520	4864	protected_universal_loader.exe	129
PID 2520 wrote to memory of 800	2520	protected_universal_loader.exe	130
PID 800 wrote to memory of 1624	800	protected_universal_loader.exe	131
PID 1624 wrote to memory of 4168	1624	protected_universal_loader.exe	132
PID 4168 wrote to memory of 4236	4168	protected_universal_loader.exe	133
PID 4236 wrote to memory of 2332	4236	protected_universal_loader.exe	134
PID 2332 wrote to memory of 3220	2332	protected_universal_loader.exe	135
PID 3220 wrote to memory of 2964	3220	protected_universal_loader.exe	136
PID 2964 wrote to memory of 1752	2964	protected_universal_loader.exe	137
PID 1752 wrote to memory of 3960	1752	protected_universal_loader.exe	138
PID 3960 wrote to memory of 2220	3960	protected_universal_loader.exe	139
PID 2220 wrote to memory of 5044	2220	protected_universal_loader.exe	140
PID 5044 wrote to memory of 5068	5044	protected_universal_loader.exe	141

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\vsscanner.py
1⤵
- Modifies registry class
PID:1600

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4608

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7ffac15dc728,0x7ffac15dc734,0x7ffac15dc740
  2⤵
  PID:436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1656,i,13295982140745278359,8687045782971498623,262144 --field-trial-handle=1904,i,11977751229083264194,3620544700202541293,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1900 /prefetch:2
  2⤵
  PID:4732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2260,i,1535313786256207670,3402511339633472896,524288 --field-trial-handle=1904,i,11977751229083264194,3620544700202541293,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2280 /prefetch:11
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:4056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2416,i,8043391207804341074,11220697562139720705,524288 --field-trial-handle=1904,i,11977751229083264194,3620544700202541293,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1760 /prefetch:13
  2⤵
  PID:1476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,7808015204271174607,3106295942645194392,2097152 --field-trial-handle=1904,i,11977751229083264194,3620544700202541293,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:1496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3276,i,186755595791747938,7704220587230820351,2097152 --field-trial-handle=1904,i,11977751229083264194,3620544700202541293,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:1868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4348,i,968863885076757869,2805074790431999295,2097152 --field-trial-handle=1904,i,11977751229083264194,3620544700202541293,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4364 /prefetch:9
  2⤵
  PID:3024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4788,i,3576004795716508108,15870246713861421309,2097152 --field-trial-handle=1904,i,11977751229083264194,3620544700202541293,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4760 /prefetch:1
  2⤵
  PID:2220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4332,i,2416842214605931917,2093850217387649680,524288 --field-trial-handle=1904,i,11977751229083264194,3620544700202541293,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4924 /prefetch:14
  2⤵
  PID:1700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5080,i,11330474788010940021,17004302246809489011,524288 --field-trial-handle=1904,i,11977751229083264194,3620544700202541293,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5088 /prefetch:14
  2⤵
  PID:4000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5532,i,1770126354877171742,12327067336411988352,524288 --field-trial-handle=1904,i,11977751229083264194,3620544700202541293,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5552 /prefetch:14
  2⤵
  PID:3820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5892,i,921286322856178402,17703787259862940360,2097152 --field-trial-handle=1904,i,11977751229083264194,3620544700202541293,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5960 /prefetch:1
  2⤵
  PID:2288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5876,i,17160121409949907058,1035610869214434246,2097152 --field-trial-handle=1904,i,11977751229083264194,3620544700202541293,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5920 /prefetch:1
  2⤵
  PID:3000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3516,i,2242363409467293797,2017040547611110507,524288 --field-trial-handle=1904,i,11977751229083264194,3620544700202541293,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3480 /prefetch:14
  2⤵
  PID:4000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3496,i,4610469284001977134,5915686285858726574,524288 --field-trial-handle=1904,i,11977751229083264194,3620544700202541293,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3476 /prefetch:14
  2⤵
  PID:860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3484,i,4577645562406784556,846819813265326216,524288 --field-trial-handle=1904,i,11977751229083264194,3620544700202541293,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3344 /prefetch:14
  2⤵
  PID:2432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3444,i,6129324646497302332,7288359833995520253,2097152 --field-trial-handle=1904,i,11977751229083264194,3620544700202541293,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5920,i,7966106648166150952,29239141248179999,2097152 --field-trial-handle=1904,i,11977751229083264194,3620544700202541293,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:3972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4876,i,14748701420614794641,13083369419051005247,524288 --field-trial-handle=1904,i,11977751229083264194,3620544700202541293,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4828 /prefetch:14
  2⤵
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - NTFS ADS
  PID:2372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4660,i,2766333366958078432,11795405690477644735,262144 --field-trial-handle=1904,i,11977751229083264194,3620544700202541293,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5772 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5456

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1872

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3600

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2408

C:\Users\Admin\Downloads\protected_universal_loader.exe
"C:\Users\Admin\Downloads\protected_universal_loader.exe"
1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4892
- C:\Users\Admin\Downloads\protected_universal_loader.exe
  "C:\Users\Admin\Downloads\protected_universal_loader.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of WriteProcessMemory
  PID:4808
- - C:\Users\Admin\Downloads\protected_universal_loader.exe
    C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious use of WriteProcessMemory
    PID:1604
  - - C:\Users\Admin\Downloads\protected_universal_loader.exe
      C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Suspicious use of WriteProcessMemory
      PID:1320
    - - C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of WriteProcessMemory
        
        PID:3444
      - C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of WriteProcessMemory
        
        PID:2664
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of WriteProcessMemory
        
        PID:3796
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        8⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3976
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        9⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1444
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        10⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4992
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        11⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4068
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        12⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3936
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        13⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3412
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        14⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4880
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        15⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1172
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        16⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1744
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        17⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5056
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        18⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1040
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        19⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4688
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        20⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2164
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        21⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4864
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        22⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2520
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        23⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:800
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        24⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1624
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        25⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4168
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        26⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4236
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        27⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2332
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        28⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3220
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        29⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2964
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        30⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1752
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        31⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3960
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        32⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2220
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        33⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5044
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        34⤵
        Executes dropped EXE
        
        PID:5068
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        35⤵
        Executes dropped EXE
        
        PID:392
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        36⤵
        Executes dropped EXE
        
        PID:4212
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        37⤵
        Executes dropped EXE
        
        PID:4276
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        38⤵
        Executes dropped EXE
        
        PID:3000
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        39⤵
        Executes dropped EXE
        
        PID:3016
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        40⤵
        Executes dropped EXE
        
        PID:4932
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        41⤵
        Executes dropped EXE
        
        PID:3464
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        42⤵
        Executes dropped EXE
        
        PID:1868
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        43⤵
        Executes dropped EXE
        
        PID:608
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        44⤵
        Executes dropped EXE
        
        PID:4904
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        45⤵
        Executes dropped EXE
        
        PID:3736
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        46⤵
        Executes dropped EXE
        
        PID:4540
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        47⤵
        Executes dropped EXE
        
        PID:3244
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        48⤵
        Executes dropped EXE
        
        PID:3668
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        49⤵
        Executes dropped EXE
        
        PID:2432
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        50⤵
        Executes dropped EXE
        
        PID:1680
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        51⤵
        Executes dropped EXE
        
        PID:1968
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        52⤵
        Executes dropped EXE
        
        PID:2320
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        53⤵
        Executes dropped EXE
        
        PID:4816
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        54⤵
        Executes dropped EXE
        
        PID:5136
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        55⤵
        Executes dropped EXE
        
        PID:5152
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        56⤵
        Executes dropped EXE
        
        PID:5168
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        57⤵
        Executes dropped EXE
        
        PID:5184
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        58⤵
        Executes dropped EXE
        
        PID:5200
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        59⤵
        Executes dropped EXE
        
        PID:5216
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        60⤵
        Executes dropped EXE
        
        PID:5232
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        61⤵
        Executes dropped EXE
        
        PID:5248
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        62⤵
        Executes dropped EXE
        
        PID:5264
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        63⤵
        Executes dropped EXE
        
        PID:5280
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        64⤵
        Executes dropped EXE
        
        PID:5296
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        65⤵
        
        PID:5312
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        66⤵
        
        PID:5332
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        67⤵
        
        PID:5348
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        68⤵
        
        PID:5364
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        69⤵
        
        PID:5380
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        70⤵
        
        PID:5396
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        71⤵
        
        PID:5412
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        72⤵
        
        PID:5496
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        73⤵
        
        PID:5512
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        74⤵
        
        PID:5528
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        75⤵
        
        PID:5544
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        76⤵
        
        PID:5560
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        77⤵
        
        PID:5596
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        78⤵
        
        PID:5612
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        79⤵
        
        PID:5628
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        80⤵
        
        PID:5644
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        81⤵
        
        PID:5660
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        82⤵
        
        PID:5676
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        83⤵
        
        PID:5692
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        84⤵
        
        PID:5708
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        85⤵
        
        PID:5724
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        86⤵
        
        PID:5740
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        87⤵
        
        PID:5756
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        88⤵
        
        PID:5772
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        89⤵
        
        PID:5788
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        90⤵
        
        PID:5804
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        91⤵
        
        PID:5820
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        92⤵
        
        PID:5836
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        93⤵
        
        PID:5852
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        94⤵
        
        PID:5868
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        95⤵
        
        PID:5884
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        96⤵
        
        PID:5900
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        97⤵
        
        PID:5916
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        98⤵
        
        PID:5932
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        99⤵
        
        PID:5948
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        100⤵
        
        PID:5964
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        101⤵
        
        PID:5980
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        102⤵
        
        PID:5996
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        103⤵
        
        PID:6012
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        104⤵
        
        PID:6036
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        105⤵
        
        PID:6052
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        106⤵
        
        PID:6068
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        107⤵
        
        PID:6084
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        108⤵
        
        PID:6100
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        109⤵
        
        PID:6116
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        110⤵
        
        PID:6132
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        111⤵
        
        PID:3956
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        112⤵
        
        PID:5436
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        113⤵
        
        PID:5452
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        114⤵
        
        PID:5468
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        115⤵
        
        PID:5484
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        116⤵
        
        PID:5580
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        117⤵
        
        PID:2972
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        118⤵
        
        PID:6152
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        119⤵
        
        PID:6168
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        120⤵
        
        PID:6184
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        121⤵
        
        PID:6200
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        122⤵
        
        PID:6216
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        123⤵
        
        PID:6232
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        124⤵
        
        PID:6248
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        125⤵
        
        PID:6264
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        126⤵
        
        PID:6280
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        127⤵
        
        PID:6296
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        128⤵
        
        PID:6312
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        129⤵
        
        PID:6328
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        130⤵
        
        PID:6344
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        131⤵
        
        PID:6360
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        132⤵
        
        PID:6376
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        133⤵
        
        PID:6392
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        134⤵
        
        PID:6408
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        135⤵
        
        PID:6424
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        136⤵
        
        PID:6440
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        137⤵
        
        PID:6460
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        138⤵
        
        PID:6476
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        139⤵
        
        PID:6492
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        140⤵
        
        PID:6508
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        141⤵
        
        PID:6524
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        142⤵
        
        PID:6540
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        143⤵
        
        PID:6556
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        144⤵
        
        PID:6572
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        145⤵
        
        PID:6588
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        146⤵
        
        PID:6604
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        147⤵
        
        PID:6620
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        148⤵
        
        PID:6636
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        149⤵
        
        PID:6652
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        150⤵
        
        PID:6668
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        151⤵
        
        PID:6684
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        152⤵
        
        PID:6700
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        153⤵
        
        PID:6716
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        154⤵
        
        PID:6732
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        155⤵
        
        PID:6748
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        156⤵
        
        PID:6764
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        157⤵
        
        PID:6780
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        158⤵
        
        PID:6812
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        159⤵
        
        PID:6832
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        160⤵
        
        PID:6856
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        161⤵
        
        PID:6872
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        162⤵
        
        PID:6888
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        163⤵
        
        PID:6908
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        164⤵
        
        PID:6924
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        165⤵
        
        PID:6940
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        166⤵
        
        PID:6956
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        167⤵
        
        PID:6972
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        168⤵
        
        PID:6988
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        169⤵
        
        PID:7004
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        170⤵
        
        PID:7020
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        171⤵
        
        PID:7040
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        172⤵
        
        PID:7056
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        173⤵
        
        PID:7072
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        174⤵
        
        PID:7088
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        175⤵
        
        PID:7104
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        176⤵
        
        PID:7120
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        177⤵
        
        PID:7140
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        178⤵
        
        PID:7156
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        179⤵
        
        PID:560
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        180⤵
        
        PID:3368
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        181⤵
        
        PID:2528
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        182⤵
        
        PID:4092
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        183⤵
        
        PID:4504
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        184⤵
        
        PID:3800
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        185⤵
        
        PID:3216
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        186⤵
        
        PID:7180
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        187⤵
        
        PID:7196
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        188⤵
        
        PID:7216
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        189⤵
        
        PID:7236
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        190⤵
        
        PID:7256
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        191⤵
        
        PID:7272
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        192⤵
        
        PID:7288
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        193⤵
        
        PID:7308
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        194⤵
        
        PID:7324
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        195⤵
        
        PID:7340
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        196⤵
        
        PID:7356
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        197⤵
        
        PID:7372
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        198⤵
        
        PID:7388
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        199⤵
        
        PID:7404
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        200⤵
        
        PID:7420
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        201⤵
        
        PID:7436
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        202⤵
        
        PID:7452
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        203⤵
        
        PID:7520
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        204⤵
        
        PID:7548
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        205⤵
        
        PID:7564
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        206⤵
        
        PID:7580
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        207⤵
        
        PID:7596
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        208⤵
        
        PID:7612
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        209⤵
        
        PID:7632
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        210⤵
        
        PID:7656
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        211⤵
        
        PID:7688
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        212⤵
        
        PID:7712
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        213⤵
        
        PID:7728
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        214⤵
        
        PID:7760
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        215⤵
        
        PID:7792
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        216⤵
        
        PID:7808
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        217⤵
        
        PID:7824
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        218⤵
        
        PID:7840
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        219⤵
        
        PID:7856
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        220⤵
        
        PID:7876
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        221⤵
        
        PID:7896
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        222⤵
        
        PID:7916
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        223⤵
        
        PID:7932
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        224⤵
        
        PID:7956
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        225⤵
        
        PID:8000
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        226⤵
        
        PID:8016
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        227⤵
        
        PID:8032
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        228⤵
        
        PID:8048
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        229⤵
        
        PID:8064
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        230⤵
        
        PID:8088
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        231⤵
        
        PID:8104
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        232⤵
        
        PID:8120
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        233⤵
        
        PID:8136
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        234⤵
        
        PID:8152
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        235⤵
        
        PID:8172
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        236⤵
        
        PID:8188
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        237⤵
        
        PID:196
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        238⤵
        
        PID:1204
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        239⤵
        
        PID:2168
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        240⤵
        
        PID:2316
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        241⤵
        
        PID:4592

C:\Users\Admin\Downloads\protected_universal_loader.exe
"C:\Users\Admin\Downloads\protected_universal_loader.exe"
1⤵
PID:6592
- C:\Users\Admin\Downloads\protected_universal_loader.exe
  "C:\Users\Admin\Downloads\protected_universal_loader.exe"
  2⤵
  PID:7392
- - C:\Users\Admin\Downloads\protected_universal_loader.exe
    C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
    3⤵
    PID:7376
  - - C:\Users\Admin\Downloads\protected_universal_loader.exe
      C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
      4⤵
      PID:7112
    - - C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        5⤵
        
        PID:7328
      - C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        6⤵
        
        PID:7076
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        7⤵
        
        PID:7016
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        8⤵
        
        PID:5288
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        9⤵
        
        PID:6932
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        10⤵
        
        PID:6928
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        11⤵
        
        PID:6772
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        12⤵
        
        PID:6720
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        13⤵
        
        PID:6624
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        14⤵
        
        PID:6532
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        15⤵
        
        PID:8
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        16⤵
        
        PID:7304
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        17⤵
        
        PID:7352
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        18⤵
        
        PID:7268
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        19⤵
        
        PID:7344
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        20⤵
        
        PID:7592
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        21⤵
        
        PID:7532
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        22⤵
        
        PID:7624
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        23⤵
        
        PID:7524
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        24⤵
        
        PID:7244
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        25⤵
        
        PID:7224
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        26⤵
        
        PID:7240
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        27⤵
        
        PID:3360
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        28⤵
        
        PID:5956
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        29⤵
        
        PID:6324
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        30⤵
        
        PID:2292
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        31⤵
        
        PID:7820
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        32⤵
        
        PID:6272
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        33⤵
        
        PID:6164
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        34⤵
        
        PID:6212
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        35⤵
        
        PID:6176
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        36⤵
        
        PID:7096
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        37⤵
        
        PID:7092
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        38⤵
        
        PID:7024
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        39⤵
        
        PID:968
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        40⤵
        
        PID:5428
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        41⤵
        
        PID:6188
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        42⤵
        
        PID:1884
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        43⤵
        
        PID:6112
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        44⤵
        
        PID:6252
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        45⤵
        
        PID:6880
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        46⤵
        
        PID:6916
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        47⤵
        
        PID:2188
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        48⤵
        
        PID:6892
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        49⤵
        
        PID:6836
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        50⤵
        
        PID:7552
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        51⤵
        
        PID:6680
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        52⤵
        
        PID:6660
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        53⤵
        
        PID:6128
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        54⤵
        
        PID:6040
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        55⤵
        
        PID:6488
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        56⤵
        
        PID:5972
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        57⤵
        
        PID:6356
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        58⤵
        
        PID:5480
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        59⤵
        
        PID:6964
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        60⤵
        
        PID:7000
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        61⤵
        
        PID:5460
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        62⤵
        
        PID:6140
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        63⤵
        
        PID:5816
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        64⤵
        
        PID:6756
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        65⤵
        
        PID:6740
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        66⤵
        
        PID:7444
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        67⤵
        
        PID:6612
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        68⤵
        
        PID:5984
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        69⤵
        
        PID:6000
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        70⤵
        
        PID:6096
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        71⤵
        
        PID:6020
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        72⤵
        
        PID:3116
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        73⤵
        
        PID:6088
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        74⤵
        
        PID:5744
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        75⤵
        
        PID:6080
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        76⤵
        
        PID:6520
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        77⤵
        
        PID:6568
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        78⤵
        
        PID:6600
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        79⤵
        
        PID:5668
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        80⤵
        
        PID:1072
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        81⤵
        
        PID:672
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        82⤵
        
        PID:5736
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        83⤵
        
        PID:5876
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        84⤵
        
        PID:5392
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        85⤵
        
        PID:5604
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        86⤵
        
        PID:5844
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        87⤵
        
        PID:5376
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        88⤵
        
        PID:6384
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        89⤵
        
        PID:5656
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        90⤵
        
        PID:5648
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        91⤵
        
        PID:5572
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        92⤵
        
        PID:5616
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        93⤵
        
        PID:5532
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        94⤵
        
        PID:5424
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        95⤵
        
        PID:5360
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        96⤵
        
        PID:5352
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        97⤵
        
        PID:5320
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        98⤵
        
        PID:5408
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        99⤵
        
        PID:5400
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        100⤵
        
        PID:8180
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        101⤵
        
        PID:3552
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        102⤵
        
        PID:8156
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        103⤵
        
        PID:1452
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        104⤵
        
        PID:2704
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        105⤵
        
        PID:3988
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        106⤵
        
        PID:448
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        107⤵
        
        PID:4580
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        108⤵
        
        PID:908
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        109⤵
        
        PID:1956
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        110⤵
        
        PID:3840
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        111⤵
        
        PID:8044
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        112⤵
        
        PID:1104
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        113⤵
        
        PID:8020
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        114⤵
        
        PID:8024
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        115⤵
        
        PID:8028
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        116⤵
        
        PID:8004
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        117⤵
        
        PID:8008
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        118⤵
        
        PID:8012
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        119⤵
        
        PID:1384
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        120⤵
        
        PID:7960
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        121⤵
        
        PID:7964
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        122⤵
        
        PID:7968
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        123⤵
        
        PID:3752
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        124⤵
        
        PID:7936
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        125⤵
        
        PID:2732
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        126⤵
        
        PID:7920
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        127⤵
        
        PID:4396
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        128⤵
        
        PID:7900
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        129⤵
        
        PID:7908
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        130⤵
        
        PID:3088
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        131⤵
        
        PID:3280
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        132⤵
        
        PID:1196
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        133⤵
        
        PID:2344
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        134⤵
        
        PID:7864
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        135⤵
        
        PID:772
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        136⤵
        
        PID:428
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        137⤵
        
        PID:7848
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        138⤵
        
        PID:2628
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        139⤵
        
        PID:7408
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        140⤵
        
        PID:7696
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        141⤵
        
        PID:4452
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        142⤵
        
        PID:6452
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        143⤵
        
        PID:7320
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        144⤵
        
        PID:7176
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        145⤵
        
        PID:6432
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        146⤵
        
        PID:6448
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        147⤵
        
        PID:7364
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        148⤵
        
        PID:1036
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        149⤵
        
        PID:7668
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        150⤵
        
        PID:7312
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        151⤵
        
        PID:4716
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        152⤵
        
        PID:6420
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        153⤵
        
        PID:6396
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        154⤵
        
        PID:7148
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        155⤵
        
        PID:6228
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        156⤵
        
        PID:6828
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        157⤵
        
        PID:2848
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        158⤵
        
        PID:5576
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        159⤵
        
        PID:5860
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        160⤵
        
        PID:5880
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        161⤵
        
        PID:1424
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        162⤵
        
        PID:5084
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        163⤵
        
        PID:4428
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        164⤵
        
        PID:5188
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        165⤵
        
        PID:5176
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        166⤵
        
        PID:8148
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        167⤵
        
        PID:8144
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        168⤵
        
        PID:5156
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        169⤵
        
        PID:5128
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        170⤵
        
        PID:4988
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        171⤵
        
        PID:8124
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        172⤵
        
        PID:2068
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        173⤵
        
        PID:4824
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        174⤵
        
        PID:4080
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        175⤵
        
        PID:3720
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        176⤵
        
        PID:8132
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        177⤵
        
        PID:3336
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        178⤵
        
        PID:4652
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        179⤵
        
        PID:556
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        180⤵
        
        PID:1148
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        181⤵
        
        PID:2108
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        182⤵
        
        PID:1496
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        183⤵
        
        PID:8096
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        184⤵
        
        PID:1612
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        185⤵
        
        PID:4820
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        186⤵
        
        PID:2620
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        187⤵
        
        PID:2144
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        188⤵
        
        PID:2072
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        189⤵
        
        PID:1468
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        190⤵
        
        PID:1864
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        191⤵
        
        PID:1132
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        192⤵
        
        PID:8080
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        193⤵
        
        PID:2004
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        194⤵
        
        PID:5212
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        195⤵
        
        PID:1536
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        196⤵
        
        PID:4608
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        197⤵
        
        PID:1888
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        198⤵
        
        PID:744
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        199⤵
        
        PID:3064
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        200⤵
        
        PID:1480
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        201⤵
        
        PID:1436
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        202⤵
        
        PID:8228
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        203⤵
        
        PID:8260
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        204⤵
        
        PID:8348
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        205⤵
        
        PID:8396
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        206⤵
        
        PID:8492
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        207⤵
        
        PID:8508
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        208⤵
        
        PID:8524
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        209⤵
        
        PID:8544
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        210⤵
        
        PID:8564
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        211⤵
        
        PID:8592
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        212⤵
        
        PID:8608
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        213⤵
        
        PID:8628
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        214⤵
        
        PID:8644
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        215⤵
        
        PID:8660
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        216⤵
        
        PID:8680
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        217⤵
        
        PID:8700
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        218⤵
        
        PID:8716
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        219⤵
        
        PID:8732
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        220⤵
        
        PID:8748
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        221⤵
        
        PID:8764
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        222⤵
        
        PID:8784
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        223⤵
        
        PID:8800
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        224⤵
        
        PID:8816
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        225⤵
        
        PID:8832
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        226⤵
        
        PID:8848
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        227⤵
        
        PID:8868
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        228⤵
        
        PID:8884
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        229⤵
        
        PID:8900
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        230⤵
        
        PID:8916
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        231⤵
        
        PID:8932
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        232⤵
        
        PID:8948
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        233⤵
        
        PID:8964
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        234⤵
        
        PID:8980
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        235⤵
        
        PID:8996
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        236⤵
        
        PID:9012
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        237⤵
        
        PID:9032
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        238⤵
        
        PID:9052
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        239⤵
        
        PID:9068
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        240⤵
        
        PID:9084
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        241⤵
        
        PID:9100
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        242⤵
        
        PID:9116
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        243⤵
        
        PID:9132
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        244⤵
        
        PID:9152
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        245⤵
        
        PID:9168
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        246⤵
        
        PID:9184
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        247⤵
        
        PID:9200
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        248⤵
        
        PID:4248
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        249⤵
        
        PID:8428
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        250⤵
        
        PID:4412
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        251⤵
        
        PID:2276
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        252⤵
        
        PID:8464
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        253⤵
        
        PID:220
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        254⤵
        
        PID:3912
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        255⤵
        
        PID:4188
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        256⤵
        
        PID:3828
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        257⤵
        
        PID:4796
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        258⤵
        
        PID:4896
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        259⤵
        
        PID:5072
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        260⤵
        
        PID:9220
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        261⤵
        
        PID:9236
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        262⤵
        
        PID:9252
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        263⤵
        
        PID:9272
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        264⤵
        
        PID:9288
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        265⤵
        
        PID:9304
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        266⤵
        
        PID:9320
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        267⤵
        
        PID:9336
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        268⤵
        
        PID:9352
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        269⤵
        
        PID:9368
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        270⤵
        
        PID:9384
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        271⤵
        
        PID:9400
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        272⤵
        
        PID:9416
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        273⤵
        
        PID:9432
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        274⤵
        
        PID:9448
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        275⤵
        
        PID:9464
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        276⤵
        
        PID:9480
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        277⤵
        
        PID:9496
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        278⤵
        
        PID:9512
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        279⤵
        
        PID:9528
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        280⤵
        
        PID:9544
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        281⤵
        
        PID:9560
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        282⤵
        
        PID:9576
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        283⤵
        
        PID:9592
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        284⤵
        
        PID:9608
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        285⤵
        
        PID:9624
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        286⤵
        
        PID:9640
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        287⤵
        
        PID:9656
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        288⤵
        
        PID:9672
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        289⤵
        
        PID:9688
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        290⤵
        
        PID:9704
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        291⤵
        
        PID:9720
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        292⤵
        
        PID:9736
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        293⤵
        
        PID:9752
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        294⤵
        
        PID:9768
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        295⤵
        
        PID:9784
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        296⤵
        
        PID:9804
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        297⤵
        
        PID:9820
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        298⤵
        
        PID:9836
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        299⤵
        
        PID:9852
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        300⤵
        
        PID:9868
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        301⤵
        
        PID:9888
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        302⤵
        
        PID:9904
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        303⤵
        
        PID:9920
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        304⤵
        
        PID:9936
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        305⤵
        
        PID:9952
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe
        
        C:\Users\Admin\Downloads\protected_universal_loader.exe -m pip install --disable-pip-version-check --quiet pyarmor
        306⤵
        
        PID:9968

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /7
1⤵
- Checks SCSI registry key(s)
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:8284

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5534b448-3795-4e34-8b10-4dd0f6a6d197.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\5534b448-3795-4e34-8b10-4dd0f6a6d197.tmp
Size 115KB
SHA256 5fdd6e167a4f3a741f39f088c7968b1bba0c0d99f59220128aba004903c91289
MD5 a21944deaf77717f53ae35fe0ed4efc0
SHA1 6f34192c6751a4a7161334bea68f1127755cd0a4
SHA512 88919edb04516adacf255aae09baba0ed2dcd6eceb68fc4262406c4edae924008d139e3c3ec274296a72e8d0676250f9020a0853cf668974158b892eeb09a0b7
SSDEEP 3072:hGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:wm7Rkm1tYpBeh2BAoe
TLSH
T1C2C3123B5E75A9775DB5B70EB08E0B1F1EF14EA6C920DE82C8D85B0427EA7CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 b9cd7b681f7dd74ad9089e7a2f1996c54f8e1cdbadd1c06abdbec7052b6a730a
MD5 07243f7955523cd1f4cb830100afe076
SHA1 227a897647bdc93867b7d7889156ef0fa0c0fcb2
SHA512 0f249bcafe06af9a8563444f0fb52178857e2063bf824658216bf3402fc6bc72ca33271caa2f9653715d5ccd2c7369ffb1f59a23edd5bf11891f1e0da36fa2de
TLSH
T189E02BBACB21982B1CFC071C64584A86DA4013676B504D4F3B3D520D8FB13764581C6C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 720B
SHA256 e2048242a176535dd86e74e34432db66e66d8e8c7eca19b8ac6f5333f9214b97
MD5 2d68de18fdd2eb208e07407569eaf2ab
SHA1 fdefec9a9876e0d6d2407f75ccf8ee33026a4ce4
SHA512 02466254e619f66886e7049382b459527ceafbb407c6eaa9e70e050be67f5ebcee0c45ba328a00a91afae9e211363983dc0063bfcf298c5302b1a9ad906e2b61
TLSH
T134016036478792D7D31C66BC96886FA0F3F326500D338D125171C7B4A8E839C140BB58
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 768B
SHA256 de3b53d9134df59e950b0fba75696675063fc891fdaa0f9966a098b050559ee4
MD5 3ca6cb41108b47ba884cc6da5c539353
SHA1 47e721d7487aa28347b4fef3e85849b8d020df89
SHA512 360a5c738369ee739b647b865f9152488fd0c677305d3202bb2cc0ee4a7c405a5d68a9235dbd90a2ce3b140e4bf5d04c9e53c05072fa6e698890f526fc82e03f
TLSH
T1C101EB6EF843E1E1C3006638C65C63582E5722043302C4292C4AC0A338E7014EC08728
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 f8cdc3019d5868aba47f7950757e3ade38ccb9c32fdc8db0e08be10cb868f872
MD5 b420bbc20658372220d548fe32761a60
SHA1 caf709d7867ca3854058f07c0a0ed21ebce2eb66
SHA512 d32d850c1e8dc0b2f699c3025ca67aebd13532a17cd156575c7f597febae0c758483ca7b1750487634db68d581d2981eda5bbc70b23fafa3d56ff036d8f9d6c9
TLSH
T11D618EF7D3E8957E8911A2F8AB116E1FCD6D0A14431C3D65C9D4AE1B63E3872D24074E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 f3324770608e269d0f9a8a89836b92f118e4b73540ed660cb4f489de3a307a3b
MD5 2e4e72fce0fa52cacc65130aae67021b
SHA1 b3c7a4086634eb6fe219cdf559bc3de1ccd7ddf8
SHA512 696bf3d164a867b2a4a4c49e60ff5898380e541c5afa2e82d4011252d4035de94ece47802069e31242d6d3489514cc29d2c9776a8d0c1370d7e4fc168aafdaf8
TLSH
T1DD61AEF7C3E8957E891192F8AB116E1FCD6D0A14432C3D66C9D4AE1B63E3872E24074E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1024B
SHA256 70a34016891659765bccb9bcfb2f0cb67dd25cd545193be08d723f365a34989a
MD5 ebd71c96095d8dc30b15693a93f690f8
SHA1 cb441ba3a0abad8cf47f4d6b9a23fca8d6eec5be
SHA512 2430c7aa6f859b26a1e35ab1dfc650d9fad1fa567b6386855e03703f411333c171b90d26d0457e3cb9ee88e9cbd402b90d1d700c82a253fa437ed6ced006a626
TLSH
T18A11ABA3F2FDB46F11782A6F1E64B80A2CBAFC36018164E5CF5A827DA0860E30747452
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1750d3e507a50d31a9dc16a7529b7cb278fea2feba3cb94a265eec2ba257e258
MD5 a8226e050f474248f624cf1be6addb7d
SHA1 2485654c4b082ea5114c21f174ca85f390d80716
SHA512 8f59e5f4eba4d128a8beea3bb30d8a5eedf2743a7c32ced007f00f884fad3315b21a565618bcd4b1e9ecba59973173e17a72b3e3969ed3525206bcea0f36d3b5
SSDEEP 192:cRRP1/m37vbtsv7sBpAPRp2Z9NHsb+WNnjo0VnexLabjVyIsnAUgtaJ:cRRd27R48UXerws0gaR8
TLSH
T19942F92EAA20643B6CDBD21DFE21BB57D7F5112135D02E84EAFC992C05E79CD221741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 6da7f637c3b95efe81fd138850c3a0ed6e1dbf8068b6fbdbdecff0d676248e1d
MD5 b23b0a2b93c7e663541a14c6ab3c731a
SHA1 b9a0e49211f7ac2cf32ba3332d8fbb4eccbb38f0
SHA512 41ce7bbd2857b6938b6cab20d024b5a79a753dba72db8b3b1e1ed6f1756fb511797b7af4a72fd20f94cd65c462b38ee252e1b0c910ef106d038a8cb74eae07af
SSDEEP 192:cRR71/m37vbxfv7sBpAPRp2zlk9NHsb+WNnjo3rQWM2nexLabRVyIsnAUgraJ:cRRZ27138UXVrws8W0aje
TLSH
T19452F92FAA10657B6CDBD21DFA21BB17E3F5112125C02E84EBFC8A1C16E79CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 863c132510ba618f06d2617a3f33c59800f04bfebd0c6fad2c183b1e3834e944
MD5 3d29707b3471a72f1281eaa63359d3b0
SHA1 11809177b6a807bd9f1ee505efb57af3bcb5072b
SHA512 3350d8f3df924a1549c81cc758191073c1875178ec2e6e9e7654c71f936c0a3715fc4fd12cbfc3bcd7ea20d5decad9459705091cafcdd0761b77fc801589bbaa
SSDEEP 192:cRRP1/m37vbxiv7sBpAPRp2zlk9NHsb+WNnjo3rQWM2nexLabRVyIsnAUgraJ:cRRd271u8UXVrws8W0aje
TLSH
T13F52F92FAA20657B6CDBD21DFA21BB17E3F5112125D02E84EBFC8A1C16E79CD2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 0d2a156654c1c543f684a1b78fc1acde7a605db8760d180da55c6029bd11d4cc
MD5 fca0a080e03e1f9f1f1ec2f425ee2b0e
SHA1 04435d408b3c935d0c54889e9019a986e7e3d26e
SHA512 0133469141ee35d9bb385a53718d74af5f96fe7ea3c4d774df026da6bbcd201abccd4b10b8b4bb6f9e60e57cecfd324ba1f320a5bc5ef4bba05fdb56deff9ffe
SSDEEP 384:7tjtw7KxkXqKf/pUZNCgVLH2HfgslsD7pLuLcSj5EXODtw+ErU3U2HG4B6T6:7ttw7KxkXqKf/pUZNCgVLH2HfgsiD7pa
TLSH
T14572F9A76C4C8E770F94CACCDC16BB4FADB5024B65E9886487FA581903D5BCB110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 d04801d5ad6f067fe383a7c41b6ba80159fe29db6de52cc5c7e70abd0a72e13c
MD5 6662e333a1bb8e7b4bd24b7f9a715509
SHA1 16ec278b847fc5321b1d5dd8acfa4ee506c5777e
SHA512 b2d38c9cc27fcc28d29a1f4d1db52a177bee585d03004917b6e16082a7df082307af2f7af21c3606ec569f7766d73098af86ec2e7620b74f3c9cad335b50035c
TLSH
T100B0129182015552C01202F82542249873149F109A0E170143F0EA228C35D58C0140A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586b19.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe586b19.TMP
Size 96B
SHA256 c535cd0685b325117b4739c13ddd565ab2ca44bdde5df1a21b5dcc099c1e4b0d
MD5 63d9e1a47ebd37dd0bf81b8c2af443e5
SHA1 7ade40aaa55550344bd480ebe0d502ff5644b1a2
SHA512 38d3bf4cb352d2c06a24a064f7daf67317cfc337d7427e5ed90032193d2718800da6ff6c080689f107a117a872b2e6660189f2575df456f95c1f8cd189b3aa70
TLSH
T19BB02222C3032202C08303FB38A0EBCC3B20EF20C203022283F00BB2EC202A80020220
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_1
Size 264KB
SHA256 4b68cae7007eeea837b09e3f4ab1c771b9badd311a0936853f45de8b081724cb
MD5 017549c3308789962590ff743cc1b796
SHA1 d4cabb628c53275c98d87604c61ddaedf85db7f6
SHA512 ca58af55fb3e3b4cc540ed9edaacc4e73b6ba04a4696ea24771cdda788866f394a263fd48f3d8f7cc68c54abb1cc1c35ef9287b649e7618367aec232dcf4fcd5
SSDEEP 3:MsEllllkEthXllkl2zExllBk:/M/xT02zWk
TLSH
T1C844040CFFC50505C50010344013C3501370D4100513D747345144137CC77544C00040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 0ac1192155a7993bfc352457b8c151a78c7417200143cecec26dd8dca9fefab7
MD5 32497624a8535179d4103ad6f1e160d1
SHA1 2ae393235a7a654a9174945a1e11948115879499
SHA512 550ed9b3c3b05e4c4971f6a4b1bc87a77dc5134cabb779623771364ca7204262b09b781c898cb517a3132fb770f09541f84938e1566233f46536319766ddb2c7
SSDEEP 6144:r4cvP/LqMPjsXFyy6TOf3/m7Rkm1tYpBeh2BAoR:r4cn/+MPjsXFXvO9oBGcAoR
TLSH
T1603412265DB66A732DD0E61E744E0A1F7AF11EEB8E20EB89C4D57F0433B4BC80685974
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 84404d9aa4f37bfac4529676cb10d94380527d6e8982ff2447550ad00efacc1c
MD5 579e29c8cf483a8659e3e8a2939b787e
SHA1 52636957bd324bfd755af6fa6bc33d208175ff3a
SHA512 e82ea5528af87deff7fd2960ca3269934b94fcc6d4143b32e799aada34e4c8512c2dcd038760568ce528aed832ede31cef43f697f05bb35efc0f888c21b3a595
SSDEEP 6144:y4cvP/LqMPjsXFyy6TOf3/m7Rkm1tYpBeh2BAoR:y4cn/+MPjsXFXvO9oBGcAoR
TLSH
T13A3412265DB66A732DD0E61E744E0A1F7AF11EEB8E20EB85C4D57F0433B4BC80685974
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 234KB
SHA256 331f89fac6c55d1ba46d9d443ed4a963996227db72be8e674da3fbb1a38772ab
MD5 697270891c50eac3e0dd2d907d98b7ea
SHA1 856aa02732029173ac2aa95af8501a9ebeedbf10
SHA512 1f0cc260653a05ce61cd2839861ebabdc42c6475470e296721827d5cf6eb225c4dcb759055341f9e293e92e30c04b88860d8cdfc23fb0fb74ee329f515e9d642
SSDEEP 6144:I4cvP/LqMPjsXFyy6TOf3/m7Rkm1tYpBeh2BAoR:I4cn/+MPjsXFXvO9oBGcAoR
TLSH
T1113412366D7769732CE0E61E754E061F6EF11EAB8E24EB89C8D57F0433B4AC80A85474
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 234KB
SHA256 e8a23d1d86a334266c12b016452aac2e7a704adb929911da831edc5cea06aa38
MD5 0441eb11ea2d220f0a277089cd959062
SHA1 80da778ad805293efce5f902bb239e746ad589cc
SHA512 d6e6bf2ab87335610a6df7d6d3d03db5c6fab58fbc30b890021b1e80ee073897aec9742921b615f78d6eb751b41d366d624dad857b1853c70716714f15041e49
SSDEEP 6144:84cvP/LqMPjsXFyy6TOf3/m7Rkm1tYpBeh2BAoR:84cn/+MPjsXFXvO9oBGcAoR
TLSH
T1DA3412366D7769732CE0E61E754E060F6EF11EAB8E24EB89D8D57F0433B4AC80A85474
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\VCRUNTIME140.dll
Size 117KB
SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
MD5 32da96115c9d783a0769312c0482a62d
SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
TLSH
T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_ctypes.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\_ctypes.pyd
Size 139KB
SHA256 25d9b0be550d428fecc697ca20450343a7c3ce77c9f5283e9aecfd188d609250
MD5 eeabc0c7756ed7a29e33e467c398737f
SHA1 ec5c401946a9df4e4ab764ddb4639e4e33e1ce40
SHA512 5e1e93545e1be34880fc680ca12004792076e88baa6cac4512fdbbdb90091a9ae441a16b8d24f64c6b03bf14903babddecfa783ce5c016759ed790c0eabc189b
SSDEEP 3072:G/n1qQ8/27N56EBZrGwrb1OzIJswKRW2r7rw8IGGPzoGc:wn1JDT6wrszIJfUDwtc
TLSH
T1A3D38F4B336841E6DA678138C6739E47FBB1F4511A10878F4264C99B2F637A2AE3F315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-console-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-console-l1-1-0.dll
Size 22KB
SHA256 27954e62e12d115bb1540db4bb9de6e2c852d914aea61cba3c203595138537b2
MD5 5cca64ee98121c203b415d577f6568d7
SHA1 9631e26d8ee54e41f7898b50088fce857eceb48b
SHA512 6386f4c4dd650d7885353419f2eaad6382b166c85006aca5be80d167b3e69d30d33fe3c06e7c5467fc39737db65d9c8f248377d3304d213a1d880c0d3c225d5c
SSDEEP 192:DROPW2hWxca8LxydkeR+1WOqxANmTsX01k9z3AJOWv1j3TLo0/:DREW2hWxcaGAYF0oR9zwPvLoU
TLSH
T1E5A23A875EB8A143FA9F9E700298E6437C3CABCB5850E4653595F20C18D77DADB0472E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-datetime-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-datetime-l1-1-0.dll
Size 22KB
SHA256 6f22ff5bf9d53b7f2c3fcd553d9b8664ef5401912194b8e599e4dbd8f3105405
MD5 11ad1c350e57420b840ced2afda9a05e
SHA1 91056d502d3168ba4e51ac7893cab3868b3a4cc4
SHA512 8df296ce0362431707b02592d75f1c003b33fafec9ebe7e7af1fdb368c7be848f8450626e564818938b2b9e71baae2a4290991c1c6ef87f9df246c748b9b1755
SSDEEP 192:QW2hWNca8LxydkeR+G4ztLVQcNpcspKLX01k9z3A8l:QW2hWNcaGA7sCscmeR9zXl
TLSH
T1D9A23A874B78D002FEDAAEB052A4DA437D3CA7DB2990942625D5F1041CA77C9EB2472E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-debug-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-debug-l1-1-0.dll
Size 22KB
SHA256 c5dc0df2fcc456c2b08392ea7d539d43549d04d14ed83d69cd46f79b9e34902a
MD5 b513fd176ee9a5fa4ed96bfa8681ec4e
SHA1 f115d1bb2948e47c51fb883a0ad2cec786c35643
SHA512 b9fdbcd1325dfe393bf2812bfea88f544a99ecc1a66a01656767938f0d8bc82f4d5ac3e806b5d29a705d9a583ea4343b63eb986bd2a62bdce198111ec3a431fc
SSDEEP 192:TW2hWTBca8LxydkeR+stnZNpA1wki+X01k9z3A1Wh:TW2hWdcaGAd9ki+R9zEo
TLSH
T157A24BC297B8E043EE9B9E7042E4DA537C3CA7CB5D90C9661684F1182C977DDAB1063E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-errorhandling-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-errorhandling-l1-1-0.dll
Size 22KB
SHA256 9ff8300ecf0ebd4c8130800b5b8857b6ddf21902264af42fb1ac15c794115864
MD5 6a33a9f3dff3f81f6ac8b199e46b9737
SHA1 1346164f9b8b7dec4f3027c27a3b408d025b055b
SHA512 d11e950d80f71ed1534993142975990bf1d62ce6c8829a5b477815dc1f20bb98f445c409bf255495278d7fc75f5bd796119e20a95e4a28e1d9f371c79622bce3
SSDEEP 192:ZqDmxD3XBW2hWs39ca8LxydkeR+awlPg9dxP3NGmVX01k9z3As80L4:4D8BW2hWs39caGAfwqNP3U0R9zj804
TLSH
T118A239C74778A083FDAFAE7052A8EA437D3CA7C60A90955515D4E6542CE33C5EB2073D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-fibers-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-fibers-l1-1-0.dll
Size 22KB
SHA256 39174763da266b4b955e27eecaef15d8283bb77f9eca94fe925d4928f37a4fa1
MD5 59ddd4d171303a61def209d886cc08fb
SHA1 38ebaa2c8f1fc2e6e31f04d583b7427474fbe3a8
SHA512 087a38ddbdad302e4e2e3e932e8338626dc3cc08a4cd58e84ddd87b666f6407beb569d1cc056c3b3349851edc1ac6fda435065bfc67c4df08ccbbd2ddb053005
SSDEEP 192:br5W2hWjca8LxydkeR+oaUPcqW8xYqD0cSX01k9z3AJL8Fg5W:br5W2hWjcaGA9alCvDyR9zELr5W
TLSH
T175A249C65B785042FDDBAD7052A8EA933C3DB7C70D90D9560694F5481CA37C9EB20A3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-file-l1-1-0.dll
Size 26KB
SHA256 a9660f0e3ab6032bba0b75e1d02ce0bc57c9043bca423477843a7a3af1b1c200
MD5 b11d7274ec876b8799104a070fc31e75
SHA1 b959c2e380b95c183e3dc26e63868493e2911e05
SHA512 0113701b9556eade925cabbd51869113e9dad92da96c0b65ecaeaeb6b6c69a35f505a1c3e0c9c1f135a6e50f7e545a34d290ce006e8f57aa644f68589f3b2756
SSDEEP 192:+nwhDPvVr8rFTswW2hWmZca8Lxyf7LRroihrSw/FiGz5j4HsX01k9z3Ac/O0v:+wJPvVreW2hWucaGAf7pofw/nR9zPn
TLSH
T131C21787C6B4F64AF98E9E3151A6C903A83853C7082085961BD4D79D3CF738AE3D85A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l1-2-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-file-l1-2-0.dll
Size 22KB
SHA256 445a2c24c8565834e1e41e4c617d2f9cf5def8e4a477e55e2f18583845b24c1d
MD5 fdb151f9c2a99ff9843ff1cf07b0e648
SHA1 9ab5c2b252ab12a9250620bfa792cacdac7537bf
SHA512 0baa933c74e8794a12c949e42d5242107da5c34ba9a9c960e90d61d44e096c609da95290fecdb19c380eca20b491cd4d1b67c7913ca7e090b96a9b2a9f4b591d
SSDEEP 192:hVeBW2hWfca8LxydkeR+w2LqwdhTsX01k9z3AJOWTxzC57:h0BW2hWfcaGAsL/dhoR9zwtxW
TLSH
T1FFA24AC257789083FA9B6E7012E8D6937C3CA3CB1D90986615D4F1581CA37CAEA1477E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l2-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-file-l2-1-0.dll
Size 20KB
SHA256 f957a4c261506484b53534a9be8931c02ec1a349b3f431a858f8215cecfec3f7
MD5 50abf0a7ee67f00f247bada185a7661c
SHA1 0cddac9ac4db3bf10a11d4b79085ef9cb3fb84a1
SHA512 c2694bb5d103baff1264926a04d2f0fe156b8815a23c3748412a81cc307b71a9236a0e974b5549321014065e393d10228a0f0004df9ba677f03b5d244a64b528
SSDEEP 192:lC+WvhWRWYnO/VWQ4SWHvD480Hy5qnajsBkffy2:4+WvhWRUGEslECl
TLSH
T16A9229D29BACD083F9677D7012D0D443BD3DA7D72550806A1AD8E6AD2C833C1EB14B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-handle-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-handle-l1-1-0.dll
Size 22KB
SHA256 94f7611fa4568f4577deba250c1254a3c83ffc7b4fd2f00243f3bfac5a993fd8
MD5 25edbbc33347a1425ee23a1d7a6cb4ec
SHA1 2ecc8b7f21b6c2d426db5496466f140b0b10ba82
SHA512 230423af863037a6e5c14f3814472ea3faa56647217c8ea7dc5f1e1c279209a09296ffaa2869037ef61d7995fa89aa07057e56d3f16a4c23159260c696d3db7f
SSDEEP 192:+sW2hWY6Oca8LxydkeR+qnz5j4HsX01k9z3Ac/9T2Gu:+sW2hWYHcaGAD3R9zPNo
TLSH
T169A24AC2C7789442FAAA5E704398E6637C3CB7CB2990C45616D4E2481CE77C9DB14B3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-heap-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-heap-l1-1-0.dll
Size 22KB
SHA256 d655a217f4c17982b4c5ecb406290885c74afba361dd840c4245c0b28e07c192
MD5 ac8333e8b1294df2187e41bc3473f6cf
SHA1 497770450fd6e0e07d94ffb5aaf31602acc3cd07
SHA512 fe5894bbec307fefc020e6044f319e98715340f82cce435027912a0a3abd47e23821294274ca174190d694f72562eee9866c77575773a84ab8c46621320462ca
SSDEEP 384:hoxlFW2hWwcaGAf7pofGkFec5ap9R9zYhlP:qPbdezA/9zE
TLSH
T14EA25BCA8778A003F9AB6EB042E5EA673C3CA7D71950955618D4F10C2C937C5EB29B3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-interlocked-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-interlocked-l1-1-0.dll
Size 22KB
SHA256 69b0f1e099dac7ffbbf1260eb4818abeacd2b9cf105b742b16e6bd5dda3bf035
MD5 4f3772ed964e993f0dbbef152621d6e7
SHA1 ca2249909fc4e38076991a5d4753cbd14dcd457e
SHA512 8fada2323034374e15d2ffde5f4a05e8df418eaca6ed295b5efc2b7348682d7df1875db0e9a47e9f0ffaa01935b831136fba8d5793cf352f02d167e36d43e095
SSDEEP 192:FzKW2hWNca8LxydkeR+/3F846IfgtUX01k9z3AW9KT3TYwg:9KW2hWNcaGAw3FR1tR9z3o8l
TLSH
T147A23AC29B7CA403FAEE6EB01298DA437C3CA7CB1D51C42616C5E15828977C9EB2473D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-libraryloader-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-libraryloader-l1-1-0.dll
Size 22KB
SHA256 87622d07bb5c9fa5ccd9f74ac70a1e2ae0cdf54462f90f365178a15a814bf3c4
MD5 3312ee2d0f34b7603be92e62a9237b98
SHA1 ce5ddfdbd501f255b3e2240fdd18ba9412173b68
SHA512 873b096d02f862c126a7d6eee06d40bfc079a98368f4e4ad0cc446a62a9becc28e595f55af828ec6f6e922507c7484ba2f20d9092ff6fc278abb1362e72a6ae0
SSDEEP 384:ETvuBL3B9W2hW0bcaGA8yUE3Sl8BR9z96cR:FBL3BrN1bjJ3B9zkO
TLSH
T1DDA23AC29B7CA042F9EB9E705264D6437C3D63CB5950E87A06E8F25818E33C5EB1467D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-localization-l1-2-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-localization-l1-2-0.dll
Size 22KB
SHA256 79ec668286cb900c66e1caf8a47309d986c9dc4d37a5d2dcedb2ff2a973896d9
MD5 bfdce1f7bd47a57c0e87582b56feb2d0
SHA1 b5ac9ed5d734cafc6c9d0a3466ccc2844960dc61
SHA512 18b331c18911ba1106ea64df88b1fe0139daeed7407a18be5f9cebed0b635f49b35c8efe634be13db71253476249f366c7f67421d1656a6fea20c8546a198312
SSDEEP 384:0naOMw3zdp3bwjGzue9/0jCRrndbNW2hWKcaGAf7pofyPGTYAsR9zCW2U8N:FOMwBprwjGzue9/0jCRrndbb1bdejMj4
TLSH
T1E6A24B96D3A4E307F94DD9707057D9427C3867860862E98603E1EB1C68F378AEBA536C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-memory-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-memory-l1-1-0.dll
Size 22KB
SHA256 7f12e6eb9a992ea199bcfc755eea488a8889cd2642dba00e49fb06a14bec8408
MD5 e6df7387562b7da98bbb304d6adb1024
SHA1 dd6366a5e364dae03ab1d7ee71a8c3a188cdfebd
SHA512 5220dcf985b6d2501a48ad7febfc3b664a0155b86a1ad1c6da55fc0c15a7060f1a04bde22729e464bdad950fb9a2fb07a72ccfcd32c294c9688e0b4686dd82de
SSDEEP 192:9TfW2hW1ca8Lxyf7LRroihrSC2RzlgnKug8X01k9z3AAF8m0/:ZfW2hW1caGAf7pofCsl8BR9z9dA
TLSH
T1E9A24B9687789803F9EB9D708295DB537C3EA7C71890A56612E4F1042CE73C5EB2473E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-namedpipe-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-namedpipe-l1-1-0.dll
Size 22KB
SHA256 daf13af507230a92191c348611e8b31bc384055ea5b9a6d18057646d93bfe4f7
MD5 6a04ee1c0b09011993a3add2900388b1
SHA1 646b6ba762f772db813d568fc513ab3dc9f217cb
SHA512 4c438b34464508c718f78b39f9f0ad48475f8b86141a3467b71fc771c57c9a4e8b8af9b2b5bab60fcab25ea3a5f72f75efc04070375dbac98caff97a2d6525a5
SSDEEP 192:TW2hWmeca8Lxyf7LRroihrSwViQcNpcspKLX01k9z3A8MG:TW2hWhcaGAf7pofwrscmeR9zX1
TLSH
T1B8A24BD68768D002FA9F6EB042E5C9133C3C97CB2D50D915A6D4F4582CA77C8E73466D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processenvironment-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-processenvironment-l1-1-0.dll
Size 22KB
SHA256 74d809270a418e4bc1d3b94348094f00463635cedfbadd97d29686a6d037d2da
MD5 8557ced01b57f200a0f30cfaa9c4af0e
SHA1 507db54f21066f5bb6aa672f2f74d5b792cc6d72
SHA512 edfbc37e203e648483194f2c714054612e66fc48b64a207708dc4d25bf069153a0398fc30d784ebe2249cc2493b13adb3d6b31f37d1c666c77acdcd0cf643abf
SSDEEP 192:/YF6EW2hWSca8LxydkeR+Y3eTREiTMAAUYX01k9z3ALfWXfwDL7ZF:AFxW2hWScaGAH38MgYR9zSfyfwTZF
TLSH
T1CCA24BC6A6BCA002FECA6D705299E5673C3CA7E71DA0C46152D4E2182CE7395E744B3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processthreads-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-processthreads-l1-1-0.dll
Size 22KB
SHA256 6620a7962adb6a25a51e13add907189763b76d0816a356465d135eeeed1065a0
MD5 9edaf9f95bb1ddad23ef7c5bb00de810
SHA1 1f73ce1815910dfb6d0d7d24d296ee8cdf960e90
SHA512 e6766b8336ef9ba4e66df1fba1efb867291ffb178ed6b22e2d4416e1bacae2a5f41d71d37311afedb64fdaf04d0441fe8f9b38c98ecac9317131dc208aaba56b
SSDEEP 384:ick1JzNcKSIPW2hWrcaGA8pvifX7R9zUX8fp/uQ:kcKSEKbA6F9zUMf9F
TLSH
T1E6A23BD186BCE183F88EAD706285E6237D7D93860C65857105D4F2983DFB3CAD62463D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processthreads-l1-1-1.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-processthreads-l1-1-1.dll
Size 22KB
SHA256 82850eb2e7d100938ebd419440e4575750999bc9e349cd074019e413673d02c8
MD5 b3c4eca47635796a499354af78e569de
SHA1 a7fb2ffb3561086f70dc0e7a76c9e37213d9eac0
SHA512 b34ac057f9dafa1c32f1725af7305a66d76397986d3d2be7235e26365efafefa92ae4b4be09c8ef9135bd67adbff6a677f6b0946452508fea0fddfd155c0b853
SSDEEP 384:n4DfIeqW2hWEcaGAn04sowGOrjR9zcX4d:3eSTbjjwGOrF9zq4d
TLSH
T147A218818B7C9042FAEB5EB06294EA933C3DA7C75960C96215D0F25C1CE7396EB1423D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-profile-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-profile-l1-1-0.dll
Size 22KB
SHA256 b43119bdfc7c562bf07c26e01b7b862aa8dc9d5e795798fe93969111244ed2da
MD5 9f8f59ccf126fe7752b45593862b77d4
SHA1 dc211a3c925655cf7dc2b798312fe22f26d3e7ca
SHA512 74d580a21ac9d96c379262a780c992ceaf2c3fe2c19fdbb4a634bea9b23578c888f1e903ed149a35098269aa082a8bd92dd7f0d5a07c24af10a8de15f8b11260
SSDEEP 192:BW2hWsFca8LxydkeR+BbBMHCE/Sv6dlX01k9z3A47ZchWB6:BW2hWsFcaGAMdE/S+R9zn7qG6
TLSH
T137A23BC2973C9043FA9BAE7052E4DA537C3DA7C76DA0856605D4F2582CA33C9BB1463D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-rtlsupport-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-rtlsupport-l1-1-0.dll
Size 22KB
SHA256 bd0cff402e3f64baaf2bfb17d86b2c4c7d03584ea2601ca5c55de147a769a32a
MD5 0fe0355a5e36cd3dee10353249eb0a46
SHA1 9b6c958e32cfcdb7dad1519bd13fdede63b16045
SHA512 7ccd4f6fb6127d30988f25c81ccb7891a6a94362a9c9e6917958e5d9063685f3c5244157dd4669ed7ea31f270cd56f870071060ac94be08018441f8f79d3d664
SSDEEP 384:mGeVnW2hW3caGAf7pofaKWMgYR9zSfym1:mGeVpibde/tgE9z21
TLSH
T191A24BDA97689002FDDA2EB01299DE673C3DABC31DA09A6205E5F1481CD73D4EB1462E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-string-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-string-l1-1-0.dll
Size 22KB
SHA256 1985000499475faf541b17c8acbce788bcdba6dddd3b8910b6730238f1c18862
MD5 7bab8cd1fa214d6de752165580b92557
SHA1 2ef6ed7dd5413a424f46358b3a500739f93ac6a6
SHA512 0aa4acac3c77d8a0bd6319f3342d1bf3ee9b8584d3c488d0a639352f7921cc2359827b3a56cc37c1d37b0b2a7ee18c7cb0700bb01f9b086aac808d255960f96d
SSDEEP 192:9GyMvr3W2hWjca8LxydkeR+e0B8kgg6bV46X01k9z3A7EAzOzD:9GyMvbW2hWjcaGAL0BhgtFR9zeEACzD
TLSH
T1AAA23A839B789006FE8A5E701299EA43BC3CA7C71DA0D5A522D4F1481CE33D9DB14B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-synch-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-synch-l1-1-0.dll
Size 22KB
SHA256 055544d562ca50d49443926bca396de985735f7451806ff2565486e406809d25
MD5 80c461242a59eb50085619922e7cbb25
SHA1 204abe872b53d800a4ec710d7ac2603fd5f18a3e
SHA512 5c86b363c0447230183c0beb660d67c294ea2fc268c2fb792719df714ec0e2d11e511f55ec15ea898bd0fedb2c79d35cce131c3f8de1511bed1faee0200c3279
SSDEEP 384:Miwidv3V0dfpkXc0vVaGFW2hWvcaGACe7kcDR9zM6xTox:VHdv3VqpkXc0vVaw6bR7B9zMPx
TLSH
T18BA22887E3E4B143F99FED7082C6D9537C3857C64960C87626D4E6282CA37C9EB1462E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-synch-l1-2-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-synch-l1-2-0.dll
Size 22KB
SHA256 0d8f2f7d031f143110c9bf5bdd4f75b24e8b41319fa2e20f78068c084e0d7603
MD5 74cb67262d1d6305ad88ca194da3d53f
SHA1 77f2d609f47d50ddf191e7d1411a89accf63543b
SHA512 a005e8a807aa448b62c9b89f01edafc9d5257a21625410c3cdabc78ad244c439255171ea09f346dc5a4066d83e3b2c605749b1c03a822999f1288db1f69bc370
SSDEEP 384:ZtZ3GW2hWgcaGAf7pof7NPGTYAsR9zCCd:sLbdecMj9zdd
TLSH
T151A25BDA87686103FA9BAD7083D6DA533C3C6BC71D60651316E9E1091CF33D5EA14A2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-sysinfo-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-sysinfo-l1-1-0.dll
Size 22KB
SHA256 8010d006df2d62839c933d3b5998abc7a7830ffe32ca68b17c76f3292f5e56ec
MD5 7bc2a31f376cf3b2cbf9be760905de0e
SHA1 8291cdefffd1072c99f10467ee5ce5668a7330a1
SHA512 638e3c9f90fc1192c5e000b5cac9aa0ab0d2ee7c8a0c2eaa1dd14e616e3ca58123a862a7d1acdce408a109fde60827f5a6e2865c2e1ad31d3ec06829600f86db
SSDEEP 192:agdKIMF3mavW2hWXca8LxydkeR+CAFSA0+HTeQZNiBX01k9z3AIsPr/c4vx5:vu7vW2hWXcaGArAFaQq/R9zZCr/TT
TLSH
T12FA21982A7B8A102F99A6E70A1D5E6437C38ABC72C51C45906D4E3185DF33C9AB2463D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-timezone-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-timezone-l1-1-0.dll
Size 22KB
SHA256 1789f5e749cf3a5d419e3b835bd9d78a077ee77f3e761f0fbf3609e38ace6f40
MD5 65a995eaf06202392453b37cfc8e459f
SHA1 69707ab23d628b5446102d3387c172449128ade6
SHA512 c0414ca69cdd52099c0931211daafa3ca6efe330b367785f5c8f67efc7d298ba87fb0afed8e8e03587a56fe5e9202f411a480da1071ddff5350324e6d2003bbf
SSDEEP 192:gzW2hWmGca8Lxyf7LRroihrSl6XpUHWX01k9z3AKCj45VvH:gzW2hWpcaGAf7pofl0pjR9zLCs/H
TLSH
T1F4A22AC3DB289402FDCF2EB052A9D9537C3CA7D70960A55649D6E0092CEB789EB2472C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-util-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-core-util-l1-1-0.dll
Size 22KB
SHA256 c893a59c4d1fa86fb50d486ebf3a873244b910efec5b00690d4a20afb7ce0761
MD5 ac4cf03b7a2f5757121f917214c2720d
SHA1 1b1e5ed1cea44be003c7b4acf3f86711885e1537
SHA512 41d8c3621c641b6865fd3aca7361c689e09706545e0e1b5221f05bc251ab5f1b46fda70a78b12240376295af22f6e631ce68615cb4c7a15e475b2d0d7e939758
SSDEEP 192:SlyW2hWjca8LxydkeR+Yhf1TOwGOr49uX01k9z3AFXGwDp:WyW2hWjcaGAVp0wGOrjR9zcX3t
TLSH
T186A23AC28BBCD042FDAB6E7062D8EA437C3CA7C75990949159D4F15828E37C5EB1463E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-conio-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-crt-conio-l1-1-0.dll
Size 22KB
SHA256 9e466e76079b73bd9b0114004d040d193dc982e4150eee1241a902d16c2bda38
MD5 9898df995b7e317efb1278de089a9fd1
SHA1 78196b60beabbdd71835df4f47ec3d6b1e347a29
SHA512 82333d8ddbdd03874473c2b2ca3676cee0aa8ee486d60093f4dfcd4b48a42eb141214cbaa65dc26d891bc64c999cbd28b2ea4dbfd8a028ba66ef390c8de3a4a3
SSDEEP 192:/BFywW2hWXca8Lxyf7LRroihrSy2WVPwZNU6nq9bFs0X01k9z3AOA8DkI8:JfW2hWXcaGAf7pofyfOA9bFs0R9zNAO8
TLSH
T1EFA2298362BCA903E5575B30A2F9EB937D391BC32990B0665494B41438E37DAFE1963C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-convert-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-crt-convert-l1-1-0.dll
Size 26KB
SHA256 64c48b1280e4540c205ee7798b7da200afd95898d520ece1d56bf8a8a351fc3e
MD5 236d7460e5d69e0b366bc9536a4de45e
SHA1 1f093347533303aad6f1b7c5d232c30b23f69f71
SHA512 ed44c5097c831a1865078c6ded876929854b3cc01e8ea227cd1fb78df3f44070c8c7536cbe24223c5177e14322ab3580cde3bc5ed8aeddf29cdb1d480ef59091
SSDEEP 192:a9cyNW2hW+ca8LxydkeR+ysI0yQN+HTeQZNiBX01k9z3AIsPr/eanig:fyNW2hW+caGAPwdNQq/R9zZCr/9ig
TLSH
T19EC2E98366E87F55E59F177221FA9BD36A381B86159153B4C203D14C3883782BD97C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-environment-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\api-ms-win-crt-environment-l1-1-0.dll
Size 22KB
SHA256 1a513c0601c5b628018c003d8598586d4a48fd1acf51372f6783dc23b0a27756
MD5 1affe1e2dd2a340a606e2ec7d3bfbb31
SHA1 f916344fcf71582cb84139931366107065cd9762
SHA512 0a372ca20f62197a62728b43e78f43e33fe44f5eef599e38ab4779b14beafc947e643485a4d6baa67c7ed2383f2fbba204340d0d3df60cef9e661d5cdfc5b8e5
SSDEEP 192:DW2hWsOca8LxydkeR+g5LKY8u27X01k9z3AxG1ms:DW2hWsOcaGA5xo7R9zqW
TLSH
T11DA229C25B786142FADB5E7092B4EA537D3CA7CB1D4095770AE6F2142CD3781AB2063D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base_library.zip

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\base_library.zip
Size 1.3MB
SHA256 bfab350c42e32cf0d4dc687630beda718ecf05be8b14c3741948fbb12827b068
MD5 caa0d61198292c9af5da73eeb5016826
SHA1 b1e6f7d0e9f4fbf6b8b56b1053ad916257f6d739
SHA512 66d1ff07f2c5518913fec7f575e5fda44e1c1b99ce99102b28621db64b8bc7be78ba4875a59ad18a9ea82717a3a0a1226e1551fb7a8f170789f5431dd6fc9832
SSDEEP 24576:hNuUFFQZXYfxRpzQeOdP2m2dfyAlblLxdzNp:/uUFFoYZRV/Jd3
TLSH
T17A552B91B9917967FEC9F37A35B75A0CA715C0109B20D303B4A88DAC6FDF260AE558CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libffi-8.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\libffi-8.dll
Size 38KB
SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
MD5 0f8e4992ca92baaf54cc0b43aaccce21
SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
SSDEEP 768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
TLSH
T10B037C0B458418A4E657D53D97A64A2AC335B9240B60F2CB03D4C2BA3F6B7D6FB7C358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\python3.dll
Size 72KB
SHA256 22c6e46d8bd563cdb072650901461ef68be2ea6cb1e80af859559d9395a27e39
MD5 a5495a547b4218148914469f1ee65d47
SHA1 91632b2965ae22db25edce6971cf59c0a3a00bba
SHA512 ab1fe6ec0b21fdac78b17afc0fd3a7573b89647a3e4af846448e285a7989342f4a8eaf191a4e90e81a990f10ff1364dd941a0c7f80c108224d8f6c7cf6bb49d1
SSDEEP 768:xHQlHwMvmhZpNVBBr2KyrGYpoQdFxxI4XngqMkf/tFd1WugwBByCsAKyEG+zMRKp:0bTrnXngXMu8IGG0ly1Ni94fIk0h4
TLSH
T168735D4E6B54F8A2DAB629FC78D199CE242B12FC5F2584DFA47CD3D20D1A310A22735D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python314.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\python314.dll
Size 6.5MB
SHA256 fde89cdb5c2d08ae65de7ef4abca1876c93ba3796002f5ac0bf7e4d4f5a94da0
MD5 006b0746b5abaf438d1bc753261c6d2c
SHA1 8f34714617f376cfa6e7e2aedc1e2a73de8c8fd8
SHA512 1c156c3f542de0a27e16ca5b7d6bbd34f2059b380ce85dbcfd5ae3a64de473fd160baba45ca30ad85dfe45742fdcb42aa969cbbaab26a569e324d4e65fb6d621
SSDEEP 98304:xVyDBH+ULEfi0VOuZd+FAX/uv3HDMiEEQn0rt:xVyD1+ULW5VrZRxim0rt
TLSH
T136669D26737901A5D9BB8035C9034647DBB1BC00AB30D34B49A4B6DA3F733635BAEB95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ucrtbase.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI48922\ucrtbase.dll
Size 1.1MB
SHA256 c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7
MD5 3b337c2d41069b0a1e43e30f891c3813
SHA1 ebee2827b5cb153cbbb51c9718da1549fa80fc5c
SHA512 fdb3012a71221447b35757ed2bdca6ed1f8833b2f81d03aabebd2cd7780a33a9c3d816535d03c5c3edd5aaf11d91156842b380e2a63135e3c7f87193ad211499
SSDEEP 24576:CJG2BrB3ZQAq0AT2jS9HKHdK6AccMs1wmxvSZX0ypFi:0VGrT6SAk3ei
TLSH
T1EC359D64B76C02A9C97BE13DC927554AFA73380147709ACB03E74AB93E2B7E552B7310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protected_universal_loader.exe

Path C:\Users\Admin\Downloads\protected_universal_loader.exe
Size 22.8MB
SHA256 822f71578cc17b9434ee3c0e1f014d4b994e243a1533e7484a0483c7f02494b5
MD5 7cf5f581115cd2cdb76bb6c84247bfc1
SHA1 3081f535b98de2b44e00a2be7fbda7c741c0d2a9
SHA512 954eb277e300bb0da641c6955e4f2da7417d31d5e8112ee7561c4ce2f526e7282a4fec1eca1f69e262d5fc0fa6a6318d0ef90816f939c5e98693d045235eee78
SSDEEP 393216:rn/xWNNvWfJD2OK4KHx96pkRDDRB390A6WGzgIfUKOcFXEAphVt3QSg+oOQKFvF3:rn/x0vv4KR9TRDDRB2TWGz58KPFRph7s
TLSH
T1B937336DB7400CFAF8BA423C8AC5D55295B164D82B8782FB13F10B552E373914A7E4FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protected_universal_loader.exe:Zone.Identifier

Path C:\Users\Admin\Downloads\protected_universal_loader.exe:Zone.Identifier
Size 173B
SHA256 4ab38f2d3b61b378ab82b7a25fdb08940ab7b02753b3d6a8e5feba7a1e8cabd3
MD5 16ed3808638d1191ac91ca8cf50de959
SHA1 1008cd0c20d475ca2d90d006d0ff77bbc82fa2ae
SHA512 adf4b09683dffee862a6dd03bc8b7c031b289f29a40c8cf0a2b0bbd39e957045dd8367521661817477dbcb6c462dc6c0ca17aca1901b754ce9047b6e3475ec0b
TLSH
T1C5C080539805809B07C827C11169A5ACF54F5981CADD4A54FF90C48F9486415D6D055F
MD5 SHA1 SHA512 TLSH

Submit Download

memory/8284-604-0x000001E2B50C0000-0x000001E2B50C1000-memory.dmp

Download

memory/8284-605-0x000001E2B50C0000-0x000001E2B50C1000-memory.dmp

Download

memory/8284-606-0x000001E2B50C0000-0x000001E2B50C1000-memory.dmp

Download

memory/8284-615-0x000001E2B50C0000-0x000001E2B50C1000-memory.dmp

Download

memory/8284-616-0x000001E2B50C0000-0x000001E2B50C1000-memory.dmp

Download

memory/8284-612-0x000001E2B50C0000-0x000001E2B50C1000-memory.dmp

Download

memory/8284-614-0x000001E2B50C0000-0x000001E2B50C1000-memory.dmp

Download

memory/8284-613-0x000001E2B50C0000-0x000001E2B50C1000-memory.dmp

Download

memory/8284-611-0x000001E2B50C0000-0x000001E2B50C1000-memory.dmp

Download

memory/8284-610-0x000001E2B50C0000-0x000001E2B50C1000-memory.dmp

Download