b3371e4b92ec1af7f7e5e1f64a2b733085d1962a6a88808bd816129bef11850b

Analysis

user interaction
yes
max time kernel
900s
max time network
479s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 23:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
178449861310240030.png
Size 173KB
Sample260722-3vmqbsar51
SHA256 b3371e4b92ec1af7f7e5e1f64a2b733085d1962a6a88808bd816129bef11850b
MD5 161c7df0bfad80f0088bbee88b561443
SHA1 cfd24a81f3e59e06d49faec99241044232120013
SHA512 a078b39caf539b1c8cad8d9f866cf510f49b775846336cc53e54ec5efdc8cd887cbff8fc3579350e854259d144580a2e2f1bff0cff872d0e6c7209829c84ec80
SSDEEP 3072:zCGpmSV2anztdXOaFGq4SzxTabnPkPyJA3la15ZdnZiD5b0jZqI6sPnIp:zE8xdFz1abnP2syA1rp6bkdO
TLSH
T11A0412EE79CFC0E12BD3B3288600C577512B3C21497E7564A4A6E6B158BF5DE813E394
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution persistence pyinstaller ransomware

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
74	4608	chrome.exe

Executes dropped EXE 64 IoCs

pid	Process
5808	cookies.exe
2156	cookies.exe
1184	cookies.exe
5640	cookies.exe
5444	cookies.exe
2676	cookies.exe
4476	cookies.exe
2240	cookies.exe
4528	cookies.exe
1232	cookies.exe
4172	cookies.exe
2576	cookies.exe
3212	cookies.exe
2900	cookies.exe
3048	cookies.exe
2272	cookies.exe
2916	cookies.exe
2244	cookies.exe
2608	cookies.exe
5424	cookies.exe
5944	cookies.exe
5592	cookies.exe
3472	cookies.exe
5964	cookies.exe
4036	cookies.exe
108	cookies.exe
5748	cookies.exe
5500	cookies.exe
2808	cookies.exe
3468	cookies.exe
4652	cookies.exe
424	cookies.exe
3840	cookies.exe
3384	cookies.exe
3120	cookies.exe
5992	cookies.exe
2056	cookies.exe
6184	cookies.exe
6236	cookies.exe
6288	cookies.exe
6344	cookies.exe
6396	cookies.exe
6448	cookies.exe
6500	cookies.exe
6552	cookies.exe
6604	cookies.exe
6656	cookies.exe
6708	cookies.exe
6760	cookies.exe
6812	cookies.exe
6864	cookies.exe
6916	cookies.exe
6968	cookies.exe
7020	cookies.exe
7072	cookies.exe
7124	cookies.exe
6148	cookies.exe
6284	cookies.exe
6268	cookies.exe
6488	cookies.exe
6620	cookies.exe
6744	cookies.exe
6828	cookies.exe
5476	cookies.exe

Loads dropped DLL 64 IoCs

pid	Process
2156	cookies.exe
2156	cookies.exe
2156	cookies.exe
2156	cookies.exe
2156	cookies.exe
2156	cookies.exe
2156	cookies.exe
2156	cookies.exe
2156	cookies.exe
2156	cookies.exe
2156	cookies.exe
2156	cookies.exe
2156	cookies.exe
2156	cookies.exe
2156	cookies.exe
2156	cookies.exe
2156	cookies.exe
2156	cookies.exe
1184	cookies.exe
1184	cookies.exe
1184	cookies.exe
1184	cookies.exe
1184	cookies.exe
1184	cookies.exe
1184	cookies.exe
1184	cookies.exe
1184	cookies.exe
1184	cookies.exe
1184	cookies.exe
1184	cookies.exe
1184	cookies.exe
1184	cookies.exe
1184	cookies.exe
1184	cookies.exe
1184	cookies.exe
1184	cookies.exe
5640	cookies.exe
5640	cookies.exe
5640	cookies.exe
5640	cookies.exe
5640	cookies.exe
5640	cookies.exe
5640	cookies.exe
5640	cookies.exe
5640	cookies.exe
5640	cookies.exe
5640	cookies.exe
5640	cookies.exe
5640	cookies.exe
5640	cookies.exe
5640	cookies.exe
5640	cookies.exe
5640	cookies.exe
5640	cookies.exe
5444	cookies.exe
5444	cookies.exe
5444	cookies.exe
5444	cookies.exe
5444	cookies.exe
5444	cookies.exe
5444	cookies.exe
5444	cookies.exe
5444	cookies.exe
5444	cookies.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Detects Pyinstaller 1 IoCs

pyinstaller

resource	yara_rule
behavioral2/files/0x000400000001bb96-613.dat	pyinstaller

Executes a command shell one-liner 1 TTPs 15 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
9704	cmd.exe
6064	cmd.exe
8428	cmd.exe
10132	cmd.exe
11064	cmd.exe
7748	cmd.exe
14640	cmd.exe
15344	cmd.exe
10488	cmd.exe
12816	cmd.exe
10268	cmd.exe
11692	cmd.exe
8852	cmd.exe
12940	cmd.exe
1696	cmd.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4608	chrome.exe

Checks SCSI registry key(s) 3 TTPs 11 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	taskmgr.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 9 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134292378509688481"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2508	mspaint.exe
2508	mspaint.exe
1640	chrome.exe
1640	chrome.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2868	taskmgr.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe
Token: SeShutdownPrivilege	1640	chrome.exe
Token: SeCreatePagefilePrivilege	1640	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
1640	chrome.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe
2868	taskmgr.exe

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
2508	mspaint.exe
2508	mspaint.exe
2508	mspaint.exe
2508	mspaint.exe
2868	taskmgr.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1640 wrote to memory of 800	1640	chrome.exe	94
PID 1640 wrote to memory of 4116	1640	chrome.exe	95
PID 1640 wrote to memory of 4116	1640	chrome.exe	95
PID 1640 wrote to memory of 4608	1640	chrome.exe	96
PID 1640 wrote to memory of 4284	1640	chrome.exe	98
PID 1640 wrote to memory of 4284	1640	chrome.exe	98
PID 1640 wrote to memory of 4452	1640	chrome.exe	99
PID 1640 wrote to memory of 5624	1640	chrome.exe	100
PID 1640 wrote to memory of 4452	1640	chrome.exe	99
PID 1640 wrote to memory of 5624	1640	chrome.exe	100
PID 1640 wrote to memory of 1212	1640	chrome.exe	101
PID 1640 wrote to memory of 1212	1640	chrome.exe	101
PID 1640 wrote to memory of 2836	1640	chrome.exe	102
PID 1640 wrote to memory of 2836	1640	chrome.exe	102
PID 1640 wrote to memory of 4320	1640	chrome.exe	103
PID 1640 wrote to memory of 4648	1640	chrome.exe	105
PID 1640 wrote to memory of 4216	1640	chrome.exe	104
PID 1640 wrote to memory of 4648	1640	chrome.exe	105
PID 1640 wrote to memory of 4216	1640	chrome.exe	104
PID 1640 wrote to memory of 5812	1640	chrome.exe	106
PID 1640 wrote to memory of 5812	1640	chrome.exe	106
PID 1640 wrote to memory of 1336	1640	chrome.exe	108
PID 1640 wrote to memory of 1336	1640	chrome.exe	108
PID 1640 wrote to memory of 2052	1640	chrome.exe	109
PID 1640 wrote to memory of 2052	1640	chrome.exe	109
PID 1640 wrote to memory of 3772	1640	chrome.exe	110
PID 1640 wrote to memory of 3772	1640	chrome.exe	110
PID 1640 wrote to memory of 2440	1640	chrome.exe	111
PID 1640 wrote to memory of 2440	1640	chrome.exe	111
PID 1640 wrote to memory of 2932	1640	chrome.exe	112
PID 1640 wrote to memory of 2932	1640	chrome.exe	112
PID 1640 wrote to memory of 1384	1640	chrome.exe	116
PID 1640 wrote to memory of 1384	1640	chrome.exe	116
PID 1640 wrote to memory of 708	1640	chrome.exe	117
PID 1640 wrote to memory of 708	1640	chrome.exe	117
PID 1640 wrote to memory of 5380	1640	chrome.exe	118
PID 1640 wrote to memory of 5380	1640	chrome.exe	118
PID 1640 wrote to memory of 4104	1640	chrome.exe	120
PID 1640 wrote to memory of 5164	1640	chrome.exe	119
PID 1640 wrote to memory of 4104	1640	chrome.exe	120
PID 1640 wrote to memory of 5164	1640	chrome.exe	119
PID 1640 wrote to memory of 2016	1640	chrome.exe	121
PID 1640 wrote to memory of 2016	1640	chrome.exe	121
PID 1640 wrote to memory of 1776	1640	chrome.exe	122
PID 1640 wrote to memory of 1776	1640	chrome.exe	122
PID 1640 wrote to memory of 1452	1640	chrome.exe	123
PID 1640 wrote to memory of 1124	1640	chrome.exe	124
PID 1640 wrote to memory of 1876	1640	chrome.exe	125
PID 1640 wrote to memory of 5616	1640	chrome.exe	126
PID 5808 wrote to memory of 2156	5808	cookies.exe	129
PID 2156 wrote to memory of 1184	2156	cookies.exe	130
PID 1184 wrote to memory of 5640	1184	cookies.exe	131
PID 5640 wrote to memory of 5444	5640	cookies.exe	132
PID 5444 wrote to memory of 2676	5444	cookies.exe	133
PID 2676 wrote to memory of 4476	2676	cookies.exe	134
PID 4476 wrote to memory of 2240	4476	cookies.exe	135
PID 2240 wrote to memory of 4528	2240	cookies.exe	136
PID 4528 wrote to memory of 1232	4528	cookies.exe	137
PID 1232 wrote to memory of 4172	1232	cookies.exe	138
PID 4172 wrote to memory of 2576	4172	cookies.exe	139
PID 2576 wrote to memory of 3212	2576	cookies.exe	140
PID 3212 wrote to memory of 2900	3212	cookies.exe	141
PID 2900 wrote to memory of 3048	2900	cookies.exe	142
PID 3048 wrote to memory of 2272	3048	cookies.exe	143

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Windows\system32\mspaint.exe
"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\178449861310240030.png"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2508

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
- Checks SCSI registry key(s)
PID:4060

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1640
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7fffa3aec728,0x7fffa3aec734,0x7fffa3aec740
  2⤵
  PID:800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1632,i,12264165177043767562,3972855218936865291,262144 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=1860 /prefetch:2
  2⤵
  PID:4116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2196,i,13543487125962829986,15791086729863104730,524288 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:11
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:4608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2360,i,13946945657339603328,10528778368182516693,524288 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=1792 /prefetch:13
  2⤵
  PID:4284
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,5322213275294682612,13519395620658154378,2097152 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3228,i,17880140330857221240,14670310344654830000,2097152 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:5624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4716,i,9346148593185055230,2031645520994771677,2097152 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:1212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4780,i,7710405254456562846,771575590196200139,524288 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:14
  2⤵
  PID:2836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5412,i,12675224396066679407,12222804270140591039,524288 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:4320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5504,i,4566467007142013388,13769228727744138748,2097152 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:4216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5540,i,12434372608033676707,6929885075941183534,2097152 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5452,i,13230204764638012969,18049109189444092681,2097152 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:1
  2⤵
  PID:5812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5704,i,935391118343009359,5239564783708252681,2097152 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:1
  2⤵
  PID:1336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6076,i,8882988863980694925,10030058263626280805,2097152 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:1
  2⤵
  PID:2052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6212,i,3870990163881522120,9393138948976286662,2097152 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:1
  2⤵
  PID:3772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5540,i,2211213492791001570,15335500050660639797,2097152 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6496,i,3255975702301025555,7827907040376113277,2097152 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:1
  2⤵
  PID:2932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6772,i,7746522199446575876,11377750512828773916,524288 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=6800 /prefetch:14
  2⤵
  PID:1384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4756,i,15655293957011258615,17395261582227166248,524288 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=6880 /prefetch:14
  2⤵
  PID:708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4756,i,14736070718595230608,7721907940270339287,524288 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=6916 /prefetch:14
  2⤵
  PID:5380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5692,i,13260883332925460429,6070011218518868909,2097152 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=6904 /prefetch:1
  2⤵
  PID:5164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6924,i,14041328242726022207,772165632886698922,2097152 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=6944 /prefetch:9
  2⤵
  PID:4104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=7156,i,15558843975948318314,6543792656536046101,2097152 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:1
  2⤵
  PID:2016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6996,i,14289049672405998735,18387641773628005387,2097152 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=6880 /prefetch:1
  2⤵
  PID:1776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=256,i,7130160812331876510,15982300879185298574,524288 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:14
  2⤵
  PID:1452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5988,i,5869399213572425264,1102003815737258275,524288 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
  2⤵
  PID:1124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6056,i,15987667177031202452,10236249635739705240,524288 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:14
  2⤵
  PID:1876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3616,i,6794831606073431869,15563147139461078775,524288 --field-trial-handle=1864,i,2232865155684217940,154773585580150895,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:14
  2⤵
  PID:5616

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5416

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1724

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:2836

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3772

C:\Users\Admin\Downloads\cookies.exe
"C:\Users\Admin\Downloads\cookies.exe"
1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5808
- C:\Users\Admin\Downloads\cookies.exe
  "C:\Users\Admin\Downloads\cookies.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of WriteProcessMemory
  PID:2156
- - C:\Users\Admin\Downloads\cookies.exe
    C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious use of WriteProcessMemory
    PID:1184
  - - C:\Users\Admin\Downloads\cookies.exe
      C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Suspicious use of WriteProcessMemory
      PID:5640
    - - C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of WriteProcessMemory
        
        PID:5444
      - C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        6⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2676
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        7⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4476
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        8⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2240
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        9⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4528
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        10⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1232
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        11⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4172
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        12⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2576
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        13⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3212
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        14⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2900
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        15⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3048
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        16⤵
        Executes dropped EXE
        
        PID:2272
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        17⤵
        Executes dropped EXE
        
        PID:2916
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        18⤵
        Executes dropped EXE
        
        PID:2244
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        19⤵
        Executes dropped EXE
        
        PID:2608
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        20⤵
        Executes dropped EXE
        
        PID:5424
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        21⤵
        Executes dropped EXE
        
        PID:5944
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        22⤵
        Executes dropped EXE
        
        PID:5592
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        23⤵
        Executes dropped EXE
        
        PID:3472
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        24⤵
        Executes dropped EXE
        
        PID:5964
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        25⤵
        Executes dropped EXE
        
        PID:4036
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        26⤵
        Executes dropped EXE
        
        PID:108
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        27⤵
        Executes dropped EXE
        
        PID:5748
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        28⤵
        Executes dropped EXE
        
        PID:5500
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        29⤵
        Executes dropped EXE
        
        PID:2808
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        30⤵
        Executes dropped EXE
        
        PID:3468
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        31⤵
        Executes dropped EXE
        
        PID:4652
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        32⤵
        Executes dropped EXE
        
        PID:424
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        33⤵
        Executes dropped EXE
        
        PID:3840
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        34⤵
        Executes dropped EXE
        
        PID:3384
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        35⤵
        Executes dropped EXE
        
        PID:3120
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        36⤵
        Executes dropped EXE
        
        PID:5992
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        37⤵
        Executes dropped EXE
        
        PID:2056
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        38⤵
        Executes dropped EXE
        
        PID:6184
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        39⤵
        Executes dropped EXE
        
        PID:6236
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        40⤵
        Executes dropped EXE
        
        PID:6288
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        41⤵
        Executes dropped EXE
        
        PID:6344
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        42⤵
        Executes dropped EXE
        
        PID:6396
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        43⤵
        Executes dropped EXE
        
        PID:6448
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        44⤵
        Executes dropped EXE
        
        PID:6500
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        45⤵
        Executes dropped EXE
        
        PID:6552
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        46⤵
        Executes dropped EXE
        
        PID:6604
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        47⤵
        Executes dropped EXE
        
        PID:6656
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        48⤵
        Executes dropped EXE
        
        PID:6708
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        49⤵
        Executes dropped EXE
        
        PID:6760
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        50⤵
        Executes dropped EXE
        
        PID:6812
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        51⤵
        Executes dropped EXE
        
        PID:6864
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        52⤵
        Executes dropped EXE
        
        PID:6916
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        53⤵
        Executes dropped EXE
        
        PID:6968
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        54⤵
        Executes dropped EXE
        
        PID:7020
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        55⤵
        Executes dropped EXE
        
        PID:7072
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        56⤵
        Executes dropped EXE
        
        PID:7124
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        57⤵
        Executes dropped EXE
        
        PID:6148
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        58⤵
        Executes dropped EXE
        
        PID:6284
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        59⤵
        Executes dropped EXE
        
        PID:6268
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        60⤵
        Executes dropped EXE
        
        PID:6488
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        61⤵
        Executes dropped EXE
        
        PID:6620
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        62⤵
        Executes dropped EXE
        
        PID:6744
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        63⤵
        Executes dropped EXE
        
        PID:6828
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        64⤵
        Executes dropped EXE
        
        PID:5476
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        65⤵
        
        PID:6896
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        66⤵
        
        PID:7000
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        67⤵
        
        PID:7104
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        68⤵
        
        PID:6252
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        69⤵
        
        PID:6648
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        70⤵
        
        PID:6880
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        71⤵
        
        PID:3504
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        72⤵
        
        PID:6384
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        73⤵
        
        PID:6672
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        74⤵
        
        PID:6752
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        75⤵
        
        PID:6492
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        76⤵
        
        PID:7200
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        77⤵
        
        PID:7252
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        78⤵
        
        PID:7304
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        79⤵
        
        PID:7356
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        80⤵
        
        PID:7408
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        81⤵
        
        PID:7464
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        82⤵
        
        PID:7516
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        83⤵
        
        PID:7568
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        84⤵
        
        PID:7620
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        85⤵
        
        PID:7676
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        86⤵
        
        PID:7728
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        87⤵
        
        PID:7788
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        88⤵
        
        PID:7840
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        89⤵
        
        PID:7896
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        90⤵
        
        PID:7948
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        91⤵
        
        PID:8000
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        92⤵
        
        PID:8052
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        93⤵
        
        PID:8104
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        94⤵
        
        PID:8156
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        95⤵
        
        PID:7188
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        96⤵
        
        PID:7232
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        97⤵
        
        PID:7348
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        98⤵
        
        PID:7552
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        99⤵
        
        PID:5620
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        100⤵
        
        PID:7716
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        101⤵
        
        PID:7828
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        102⤵
        
        PID:7872
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        103⤵
        
        PID:7992
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        104⤵
        
        PID:7196
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        105⤵
        
        PID:4624
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        106⤵
        
        PID:7456
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        107⤵
        
        PID:7692
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        108⤵
        
        PID:1628
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        109⤵
        
        PID:8048
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        110⤵
        
        PID:8032
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        111⤵
        
        PID:7372
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        112⤵
        
        PID:4780
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        113⤵
        
        PID:2496
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        114⤵
        
        PID:7600
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        115⤵
        
        PID:7836
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        116⤵
        
        PID:8144
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        117⤵
        
        PID:1148
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        118⤵
        
        PID:8236
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        119⤵
        
        PID:8288
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        120⤵
        
        PID:8340
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        121⤵
        
        PID:8392
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        122⤵
        
        PID:8444
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        123⤵
        
        PID:8496
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        124⤵
        
        PID:8552
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        125⤵
        
        PID:8604
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        126⤵
        
        PID:8656
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        127⤵
        
        PID:8708
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        128⤵
        
        PID:8780
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        129⤵
        
        PID:8832
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        130⤵
        
        PID:8888
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        131⤵
        
        PID:8940
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        132⤵
        
        PID:8992
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        133⤵
        
        PID:9044
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        134⤵
        
        PID:9108
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        135⤵
        
        PID:9164
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        136⤵
        
        PID:1328
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        137⤵
        
        PID:4600
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        138⤵
        
        PID:972
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "ver"
        139⤵
        Executes a command shell one-liner
        
        PID:8428
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        139⤵
        
        PID:4588
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        140⤵
        
        PID:8484
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        141⤵
        
        PID:8436
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        142⤵
        
        PID:8600
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        143⤵
        
        PID:4996
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        144⤵
        
        PID:8752
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        145⤵
        
        PID:4272
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        146⤵
        
        PID:4496
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        147⤵
        
        PID:8820
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        148⤵
        
        PID:8936
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        149⤵
        
        PID:8920
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        150⤵
        
        PID:9060
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        151⤵
        
        PID:884
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        152⤵
        
        PID:8272
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        153⤵
        
        PID:8408
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        154⤵
        
        PID:3180
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        155⤵
        
        PID:4072
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        156⤵
        
        PID:3236
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        157⤵
        
        PID:3860
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        158⤵
        
        PID:8796
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        159⤵
        
        PID:8876
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        160⤵
        
        PID:9088
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        161⤵
        
        PID:1364
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        162⤵
        
        PID:8480
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        163⤵
        
        PID:8644
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        164⤵
        
        PID:2184
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        165⤵
        
        PID:8872
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        166⤵
        
        PID:9040
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        167⤵
        
        PID:2968
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        168⤵
        
        PID:836
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        169⤵
        
        PID:2428
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        170⤵
        
        PID:5632
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        171⤵
        
        PID:264
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        172⤵
        
        PID:5888
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        173⤵
        
        PID:804
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        174⤵
        
        PID:9264
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        175⤵
        
        PID:9320
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        176⤵
        
        PID:9372
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        177⤵
        
        PID:9424
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        178⤵
        
        PID:9480
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        179⤵
        
        PID:9544
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        180⤵
        
        PID:9612
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        181⤵
        
        PID:9664
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "ver"
        182⤵
        Executes a command shell one-liner
        
        PID:9704
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        182⤵
        
        PID:9748
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        183⤵
        
        PID:9804
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        184⤵
        
        PID:9864
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        185⤵
        
        PID:9920
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        186⤵
        
        PID:9972
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        187⤵
        
        PID:10028
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        188⤵
        
        PID:10080
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        189⤵
        
        PID:10136
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        190⤵
        
        PID:10192
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        191⤵
        
        PID:756
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        192⤵
        
        PID:2352
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        193⤵
        
        PID:9336
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        194⤵
        
        PID:9464
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        195⤵
        
        PID:8136
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        196⤵
        
        PID:3164
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        197⤵
        
        PID:2684
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        198⤵
        
        PID:9740
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        199⤵
        
        PID:9792
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        200⤵
        
        PID:9900
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        201⤵
        
        PID:9960
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        202⤵
        
        PID:9952
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        203⤵
        
        PID:10120
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        204⤵
        
        PID:3428
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        205⤵
        
        PID:10236
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        206⤵
        
        PID:9312
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        207⤵
        
        PID:9412
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        208⤵
        
        PID:9648
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        209⤵
        
        PID:9524
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        210⤵
        
        PID:9844
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        211⤵
        
        PID:6668
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        212⤵
        
        PID:10076
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        213⤵
        
        PID:3932
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        214⤵
        
        PID:4796
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        215⤵
        
        PID:9540
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        216⤵
        
        PID:2716
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        217⤵
        
        PID:9724
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        218⤵
        
        PID:6772
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        219⤵
        
        PID:9356
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        220⤵
        
        PID:2552
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        221⤵
        
        PID:6852
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        222⤵
        
        PID:6428
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        223⤵
        
        PID:9256
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "ver"
        224⤵
        Executes a command shell one-liner
        
        PID:10132
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        224⤵
        
        PID:2724
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        225⤵
        
        PID:6820
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        226⤵
        
        PID:7160
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        227⤵
        
        PID:1636
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        228⤵
        
        PID:6228
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        229⤵
        
        PID:10260
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        230⤵
        
        PID:10312
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        231⤵
        
        PID:10364
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        232⤵
        
        PID:10416
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        233⤵
        
        PID:10468
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        234⤵
        
        PID:10520
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        235⤵
        
        PID:10572
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        236⤵
        
        PID:10624
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        237⤵
        
        PID:10676
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        238⤵
        
        PID:10728
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        239⤵
        
        PID:10780
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        240⤵
        
        PID:10832
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        241⤵
        
        PID:10892
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        242⤵
        
        PID:10944
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        243⤵
        
        PID:10996
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        244⤵
        
        PID:11048
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        245⤵
        
        PID:11100
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        246⤵
        
        PID:11152
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        247⤵
        
        PID:11204
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        248⤵
        
        PID:11256
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        249⤵
        
        PID:10308
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        250⤵
        
        PID:7368
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        251⤵
        
        PID:7416
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        252⤵
        
        PID:10568
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        253⤵
        
        PID:7628
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        254⤵
        
        PID:10720
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        255⤵
        
        PID:10848
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        256⤵
        
        PID:10980
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        257⤵
        
        PID:10988
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        258⤵
        
        PID:2216
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        259⤵
        
        PID:11244
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        260⤵
        
        PID:10348
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        261⤵
        
        PID:7420
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        262⤵
        
        PID:4152
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        263⤵
        
        PID:10764
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        264⤵
        
        PID:7964
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        265⤵
        
        PID:11036
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        266⤵
        
        PID:11012
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        267⤵
        
        PID:4576
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        268⤵
        
        PID:7548
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        269⤵
        
        PID:10564
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        270⤵
        
        PID:7668
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "ver"
        271⤵
        Executes a command shell one-liner
        
        PID:11064
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        271⤵
        
        PID:3024
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        272⤵
        
        PID:2984
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        273⤵
        
        PID:4724
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        274⤵
        
        PID:10772
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        275⤵
        
        PID:10536
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        276⤵
        
        PID:8068
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        277⤵
        
        PID:8504
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        278⤵
        
        PID:8300
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        279⤵
        
        PID:5228
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        280⤵
        
        PID:11288
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        281⤵
        
        PID:11340
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        282⤵
        
        PID:11392
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        283⤵
        
        PID:11444
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        284⤵
        
        PID:11512
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        285⤵
        
        PID:11564
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        286⤵
        
        PID:11632
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        287⤵
        
        PID:11684
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        288⤵
        
        PID:11736
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        289⤵
        
        PID:11788
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        290⤵
        
        PID:11840
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        291⤵
        
        PID:11892
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        292⤵
        
        PID:11944
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        293⤵
        
        PID:11996
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        294⤵
        
        PID:12048
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        295⤵
        
        PID:12100
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        296⤵
        
        PID:12152
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        297⤵
        
        PID:12204
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        298⤵
        
        PID:12256
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        299⤵
        
        PID:8668
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        300⤵
        
        PID:11276
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        301⤵
        
        PID:4432
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        302⤵
        
        PID:11500
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        303⤵
        
        PID:11628
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        304⤵
        
        PID:11700
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        305⤵
        
        PID:3540
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        306⤵
        
        PID:11768
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        307⤵
        
        PID:2456
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        308⤵
        
        PID:11960
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        309⤵
        
        PID:12032
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        310⤵
        
        PID:12096
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        311⤵
        
        PID:12040
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        312⤵
        
        PID:3344
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        313⤵
        
        PID:5140
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        314⤵
        
        PID:8760
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        315⤵
        
        PID:11408
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        316⤵
        
        PID:9000
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        317⤵
        
        PID:9004
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        318⤵
        
        PID:11772
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        319⤵
        
        PID:11752
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        320⤵
        
        PID:1216
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "ver"
        321⤵
        Executes a command shell one-liner
        
        PID:1696
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        321⤵
        
        PID:5540
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        322⤵
        
        PID:2924
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        323⤵
        
        PID:2536
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        324⤵
        
        PID:4840
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        325⤵
        
        PID:5296
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        326⤵
        
        PID:11624
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        327⤵
        
        PID:11552
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        328⤵
        
        PID:2084
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        329⤵
        
        PID:4280
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        330⤵
        
        PID:2992
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        331⤵
        
        PID:3616
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        332⤵
        
        PID:11616
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        333⤵
        
        PID:1440
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        334⤵
        
        PID:8320
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        335⤵
        
        PID:4480
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        336⤵
        
        PID:4376
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        337⤵
        
        PID:9024
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        338⤵
        
        PID:4208
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        339⤵
        
        PID:4304
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        340⤵
        
        PID:4328
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        341⤵
        
        PID:9272
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        342⤵
        
        PID:9276
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        343⤵
        
        PID:9760
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        344⤵
        
        PID:12328
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        345⤵
        
        PID:12380
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        346⤵
        
        PID:12432
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        347⤵
        
        PID:12488
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        348⤵
        
        PID:12540
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        349⤵
        
        PID:12592
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        350⤵
        
        PID:12644
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        351⤵
        
        PID:12696
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        352⤵
        
        PID:12748
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        353⤵
        
        PID:12800
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        354⤵
        
        PID:12852
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        355⤵
        
        PID:12904
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        356⤵
        
        PID:12956
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        357⤵
        
        PID:13008
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        358⤵
        
        PID:13060
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        359⤵
        
        PID:13112
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        360⤵
        
        PID:13164
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        361⤵
        
        PID:13216
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        362⤵
        
        PID:13268
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        363⤵
        
        PID:12316
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        364⤵
        
        PID:3528
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        365⤵
        
        PID:12472
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        366⤵
        
        PID:5736
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        367⤵
        
        PID:12628
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        368⤵
        
        PID:12584
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        369⤵
        
        PID:12796
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "ver"
        370⤵
        Executes a command shell one-liner
        
        PID:12816
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        370⤵
        
        PID:4656
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        371⤵
        
        PID:12972
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        372⤵
        
        PID:12948
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        373⤵
        
        PID:13040
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        374⤵
        
        PID:9744
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        375⤵
        
        PID:13156
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        376⤵
        
        PID:12324
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        377⤵
        
        PID:13308
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        378⤵
        
        PID:10064
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        379⤵
        
        PID:12424
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        380⤵
        
        PID:6416
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        381⤵
        
        PID:12636
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        382⤵
        
        PID:6520
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        383⤵
        
        PID:6624
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        384⤵
        
        PID:9476
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        385⤵
        
        PID:13024
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        386⤵
        
        PID:6768
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        387⤵
        
        PID:4088
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        388⤵
        
        PID:2204
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        389⤵
        
        PID:3628
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        390⤵
        
        PID:9932
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        391⤵
        
        PID:10156
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        392⤵
        
        PID:3572
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        393⤵
        
        PID:5788
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        394⤵
        
        PID:5968
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        395⤵
        
        PID:3028
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        396⤵
        
        PID:1800
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        397⤵
        
        PID:1036
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        398⤵
        
        PID:2028
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        399⤵
        
        PID:5304
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        400⤵
        
        PID:4296
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "ver"
        401⤵
        Executes a command shell one-liner
        
        PID:10268
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        401⤵
        
        PID:10324
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        402⤵
        
        PID:400
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        403⤵
        
        PID:1908
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        404⤵
        
        PID:12840
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        405⤵
        
        PID:10532
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        406⤵
        
        PID:12848
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        407⤵
        
        PID:6636
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        408⤵
        
        PID:6876
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        409⤵
        
        PID:13256
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        410⤵
        
        PID:4168
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        411⤵
        
        PID:6784
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        412⤵
        
        PID:9840
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        413⤵
        
        PID:4340
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        414⤵
        
        PID:10956
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        415⤵
        
        PID:10580
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        416⤵
        
        PID:13100
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        417⤵
        
        PID:7696
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        418⤵
        
        PID:7756
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        419⤵
        
        PID:12692
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        420⤵
        
        PID:7264
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        421⤵
        
        PID:7916
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        422⤵
        
        PID:12092
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        423⤵
        
        PID:8020
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        424⤵
        
        PID:11108
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        425⤵
        
        PID:7152
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        426⤵
        
        PID:7248
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        427⤵
        
        PID:5384
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        428⤵
        
        PID:6700
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        429⤵
        
        PID:6424
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        430⤵
        
        PID:7524
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        431⤵
        
        PID:7564
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        432⤵
        
        PID:10776
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        433⤵
        
        PID:7056
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        434⤵
        
        PID:1820
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        435⤵
        
        PID:7280
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        436⤵
        
        PID:10296
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        437⤵
        
        PID:6232
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        438⤵
        
        PID:11184
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        439⤵
        
        PID:6776
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        440⤵
        
        PID:7592
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        441⤵
        
        PID:13596
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        442⤵
        
        PID:13648
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        443⤵
        
        PID:13700
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        444⤵
        
        PID:13752
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        445⤵
        
        PID:13812
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        446⤵
        
        PID:13864
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        447⤵
        
        PID:13916
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        448⤵
        
        PID:13968
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        449⤵
        
        PID:14020
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        450⤵
        
        PID:14072
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        451⤵
        
        PID:14124
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        452⤵
        
        PID:14176
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        453⤵
        
        PID:14228
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        454⤵
        
        PID:14280
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        455⤵
        
        PID:144
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        456⤵
        
        PID:13632
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        457⤵
        
        PID:13628
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        458⤵
        
        PID:8080
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        459⤵
        
        PID:13848
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        460⤵
        
        PID:13804
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        461⤵
        
        PID:13908
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        462⤵
        
        PID:14068
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        463⤵
        
        PID:14000
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        464⤵
        
        PID:14116
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "ver"
        465⤵
        Executes a command shell one-liner
        
        PID:11692
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        465⤵
        
        PID:11744
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        466⤵
        
        PID:7940
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        467⤵
        
        PID:3780
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        468⤵
        
        PID:11904
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        469⤵
        
        PID:13696
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        470⤵
        
        PID:7496
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        471⤵
        
        PID:13932
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        472⤵
        
        PID:4544
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        473⤵
        
        PID:8572
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        474⤵
        
        PID:11372
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        475⤵
        
        PID:11692
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        476⤵
        
        PID:11800
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        477⤵
        
        PID:4820
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        478⤵
        
        PID:4052
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "ver"
        479⤵
        Executes a command shell one-liner
        
        PID:7748
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        479⤵
        
        PID:8184
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        480⤵
        
        PID:12164
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        481⤵
        
        PID:11988
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        482⤵
        
        PID:8364
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        483⤵
        
        PID:7536
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        484⤵
        
        PID:9180
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "ver"
        485⤵
        Executes a command shell one-liner
        
        PID:8852
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        485⤵
        
        PID:4252
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        486⤵
        
        PID:8232
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "ver"
        487⤵
        Executes a command shell one-liner
        
        PID:6064
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        487⤵
        
        PID:12264
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        488⤵
        
        PID:3760
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        489⤵
        
        PID:8540
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        490⤵
        
        PID:11956
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        491⤵
        
        PID:5324
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        492⤵
        
        PID:2512
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        493⤵
        
        PID:12188
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        494⤵
        
        PID:14164
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        495⤵
        
        PID:12132
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        496⤵
        
        PID:3400
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        497⤵
        
        PID:12844
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        498⤵
        
        PID:1144
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        499⤵
        
        PID:2400
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        500⤵
        
        PID:5840
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        501⤵
        
        PID:11028
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        502⤵
        
        PID:8964
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        503⤵
        
        PID:2516
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        504⤵
        
        PID:8276
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        505⤵
        
        PID:9676
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        506⤵
        
        PID:8420
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        507⤵
        
        PID:8864
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        508⤵
        
        PID:9328
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        509⤵
        
        PID:8064
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        510⤵
        
        PID:3324
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        511⤵
        
        PID:12600
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        512⤵
        
        PID:12440
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        513⤵
        
        PID:14364
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        514⤵
        
        PID:14416
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        515⤵
        
        PID:14468
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        516⤵
        
        PID:14520
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        517⤵
        
        PID:14572
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "ver"
        518⤵
        Executes a command shell one-liner
        
        PID:14640
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        518⤵
        
        PID:14684
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        519⤵
        
        PID:14736
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        520⤵
        
        PID:14788
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        521⤵
        
        PID:14840
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        522⤵
        
        PID:14892
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        523⤵
        
        PID:14944
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        524⤵
        
        PID:14996
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        525⤵
        
        PID:15048
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        526⤵
        
        PID:15100
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        527⤵
        
        PID:15152
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        528⤵
        
        PID:15204
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        529⤵
        
        PID:15256
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        530⤵
        
        PID:15312
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        531⤵
        
        PID:2672
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        532⤵
        
        PID:14404
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        533⤵
        
        PID:12860
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        534⤵
        
        PID:9996
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        535⤵
        
        PID:10048
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        536⤵
        
        PID:14640
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        537⤵
        
        PID:13120
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        538⤵
        
        PID:14804
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        539⤵
        
        PID:14780
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        540⤵
        
        PID:14980
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        541⤵
        
        PID:14936
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        542⤵
        
        PID:15116
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        543⤵
        
        PID:13760
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        544⤵
        
        PID:5804
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        545⤵
        
        PID:9732
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        546⤵
        
        PID:14400
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        547⤵
        
        PID:2328
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "ver"
        548⤵
        Executes a command shell one-liner
        
        PID:12940
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        548⤵
        
        PID:10068
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        549⤵
        
        PID:13124
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        550⤵
        
        PID:14724
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        551⤵
        
        PID:14856
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        552⤵
        
        PID:9716
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        553⤵
        
        PID:9692
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        554⤵
        
        PID:15092
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        555⤵
        
        PID:15244
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        556⤵
        
        PID:15248
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "ver"
        557⤵
        Executes a command shell one-liner
        
        PID:15344
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        557⤵
        
        PID:9820
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        558⤵
        
        PID:12996
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        559⤵
        
        PID:13016
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        560⤵
        
        PID:9452
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        561⤵
        
        PID:13180
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        562⤵
        
        PID:12532
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        563⤵
        
        PID:14984
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        564⤵
        
        PID:6200
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        565⤵
        
        PID:14360
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        566⤵
        
        PID:4380
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        567⤵
        
        PID:9728
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        568⤵
        
        PID:5148
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        569⤵
        
        PID:244
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        570⤵
        
        PID:7040
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        571⤵
        
        PID:9188
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        572⤵
        
        PID:5044
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "ver"
        573⤵
        Executes a command shell one-liner
        
        PID:10488
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        573⤵
        
        PID:13056
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        574⤵
        
        PID:10592
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        575⤵
        
        PID:10012
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        576⤵
        
        PID:5456
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        577⤵
        
        PID:3132
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        578⤵
        
        PID:10840
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        579⤵
        
        PID:896
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        580⤵
        
        PID:10644
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        581⤵
        
        PID:12640
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        582⤵
        
        PID:3260
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        583⤵
        
        PID:2004
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        584⤵
        
        PID:11224
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        585⤵
        
        PID:4716
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        586⤵
        
        PID:10344
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        587⤵
        
        PID:7472
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        588⤵
        
        PID:6680
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        589⤵
        
        PID:11160
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        590⤵
        
        PID:10928
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        591⤵
        
        PID:10380
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        592⤵
        
        PID:6516
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        593⤵
        
        PID:7268
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        594⤵
        
        PID:15404
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        595⤵
        
        PID:15456
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        596⤵
        
        PID:15516
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        597⤵
        
        PID:15572
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        598⤵
        
        PID:15624
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        599⤵
        
        PID:15676
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        600⤵
        
        PID:15728
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        601⤵
        
        PID:15780
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        602⤵
        
        PID:15832
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        603⤵
        
        PID:15884
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        604⤵
        
        PID:15936
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        605⤵
        
        PID:15988
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        606⤵
        
        PID:16048
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install discord.py --quiet
        607⤵
        
        PID:16100
        
        C:\Users\Admin\Downloads\cookies.exe
        
        C:\Users\Admin\Downloads\cookies.exe -m pip install psutil --quiet
        607⤵
        
        PID:16264

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /7
1⤵
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2868

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 80dce442f7c3768e69da105a0e7322d076e788d6cbffcdbf518159bc73c55f0b
MD5 ca5bbcea3824592e22db5a4778849ee1
SHA1 621f43cdd55e495bd4c0b90a35691e6522167d5a
SHA512 b0d882fb85b7e500abf78ff4f6c1aff832d9495546ce3d604e47c1afacea6a6ffbd7db9391b7506ff786ac8d8cc871a4f1db4f2073605451d6cfab95fc7946f3
TLSH
T135316F4263892899DBB432BB23E51109F778D1B44553BE1305A3957C28FE7BA1832E03
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

craw_background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

57687447-510e-4ff9-8024-a9842a088d12.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\57687447-510e-4ff9-8024-a9842a088d12.tmp
Size 6KB
SHA256 3810c369de5f05c8885ea402fb12fdc6dd215236cf1474d191a39141741a509c
MD5 a5f8fe7cbacca950baf9dbd16b968e06
SHA1 8938d2172c0efecf7353793ae1bc21130afbe4db
SHA512 9ba24d99b376e160aa6c771d3075fab0968bbfa0e72d3452d729d5d876de77d2283d66d0453aae75171b691bc89fbc50d6b22e22eda4d04bc904602c8aeaeeda
SSDEEP 192:DvaabAeeP92iBwoL7FIMFanGIsFVtLnHf8I7Hvl:DvaabAee12iBwoL7FIMFanGIsFVtLnHR
TLSH
T167D18CF7C7E4867E891166F49B146F2BCE2D0919432C3C1AD8D4AF1F93E2871E251A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 f8d59ebc4555cf5f19a018850fddb14096e7e60bec98c54bce04807ea4c6a74c
MD5 3727ef25faf6d4d2236603affafc60c7
SHA1 42e96343990dccacb65a6e55b0e1bee695e28282
SHA512 49b72da78c0fd8781976ccbfda308536792457734f978373e80fd1679fb8ed9817f03b16bb2a36f127e3458cfe35030da4fff319d1db7b00b66d2f74ab8db6ee
TLSH
T1AE113B5745BEF96B107D54B71F447C096E7AB83502A368F8EE6B826DB0C28F31606427
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 ce0ae2ec7e833ac65002d95c76e9a8d888461ab6140586be4f9fe3979d2b58d2
MD5 ab238e6253f83ded5fa78cec2348df4e
SHA1 3ee052f4ec233a24ca6d15540e9da232a9875121
SHA512 33891b745bd557425ffb52013e82e5d0264751793c7f3bc38a739316056dc1df6c1dc49805e6481f97b02dc39b285ef3f97cb5b049908cc84bc967c14b64e787
SSDEEP 192:3Roj7zzRXv7+TAPRp2O9pHsb+WNnzM0IgokwsyJVyIsnAUge:3Roj3zR/3XtTwo0Qpve
TLSH
T16B32A62FBD15693B5DCBD229F9667793E7F5102262902E84EAFC8A1C14E79CC2317017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 fc4998824e30b78196210abf004fb6b293188066d2b277f59f6bccb44a4aee68
MD5 eab5d7a7c8f5f269db703b27e2e1634a
SHA1 94785ca0913a2fa68005e6407c485bc19ccd32bb
SHA512 a6b73b61b4e12ed07f9e3b07074bd68af697a40ae07f84ff169393ae2b56a3e2f1b6b5acd1c1c494ad2d3a18451ce7e3615577be4af7dd7ed0f507dcbe1d93ac
SSDEEP 192:3Roj7zZRXv7+TAPRp2y59pHsb+WNnzMxmz27gokwsyJVyIsnAUge:3Roj3ZR/3XnTwou2Jpve
TLSH
T1A542952FBD10697B5CDBD229F9657797E7F5002662902EC4EAFC8A1C14E79CC2217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0231a9367b86e97ee449c01b8901d7ac3daecc8c984cfed57a6f95e08380b968
MD5 96a68731b708a949515475e5de990ec3
SHA1 c8e993c767558b1d38b4e8bc1b237463b8e4bd7a
SHA512 4ab838a96aa1f73a664107d4a9c68cbce598052f8f1d0a6d58e8ab1cc628f885a5829573d31b132353ce2cb7a8e14e257c81253fa991e6212add9f816ac7d874
SSDEEP 192:3RoP7zZRXv7+TAPRp2y59pHsb+WNnzMxmz28gokws8JVyIsnAUgE:3RoP3ZR/3XnTwou2MPvE
TLSH
T12042A56FBD10697B5CDBD229F96677A7E3F5002262902E84EAFC8A1C14E79CC2317017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 fb377604f2eff03c4677a647c8c94a33496bb6a03f2ca3b617f73d6d02079dca
MD5 c879080c9ba72d4bd02fa06950d0d4da
SHA1 51eeebb8e8d90b5930e9e2aca5c65a6a5e11bd40
SHA512 b3049b1fedf12cf8e69c46588916533fc10ffee805ef2066c1e5abada55bbd8178d890f43ff726bdcb387c44a2df1d11d1ba3d3d6ee4537f088d19751b4a55f8
SSDEEP 192:eLE4K6Xn7KxkXqK4I40pUZNCgVLHrKHfFKslEiTtXzKD/ML+ErUkKNxn50i4S+h:uEjEn7KxkXqKf/pUZNCgVLH2HfgslLth
TLSH
T11532C727A48E9E7F4FD8E51CDC477F4B6CB502567378082896FB9C0403AA78A214A1A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 8a556d827514b181cb867657c38932cec3936750eb48c43dab62a0f7e9991442
MD5 d1c0a2821dc9bd563061c1a75e3cfe3f
SHA1 b8aad91b998fc2d92679fe5194abe355a5f4e99c
SHA512 ce9397864e91cf23e5794fb8288fe12ddb9876001a53422e1ae4a0b03a0fd561d2c786fca59fc839891daf475ab464c31834d47add234d22431f2913ceaa6a12
TLSH
T1DDA002A041C06CD3CD2556F073A517823A41581918559B33DCE54456CA7F5CE5103940
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59e006.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index~RFe59e006.TMP
Size 48B
SHA256 10c2a3fce103ac9cd516fdeef9db7ed0fe743c220458acd2ef25f8adb2675357
MD5 b484f843ae1c73fdb0165fcb8a34ad76
SHA1 80fd0202e61eb44e0a36623c3077f8f011d22e62
SHA512 c6ba87c9b2e1ffb3267ee06e8c6120ca852c241a3fbe17d1b457a00ed682739ca82f3759632ac9b14c385ef7425448e5e310a829d4f857a77998d9b413888c02
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe59e0f0.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State~RFe59e0f0.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 124KB
SHA256 a23ec4bfba41f8aae5d200d61e143cc3481950babee2d6e8472d77ca94e58e5a
MD5 82799e14ad2b50e0700d18747b6a950a
SHA1 0cddb36c6aabc351223ae8ccd4232a21fc27f163
SHA512 d34caba5ef1365c8b90e8ef3710f5cd7f82e4704d7914c7d9c8213ffec2459d2764f27ffa3ebcd7f5d9f53d37987f9ab927c87a0a0ccd21c882615e18120591b
SSDEEP 3072:k85ojdiex6bP7MMk4am/mfe06ZYSDryELNP9Oo+lHX:RojdDx6bPYMk43/mkBOECo+JX
TLSH
T176C3123554702EBC8B6DDE01B11F989FFE7E42032C28CAEAC450394D85ADF99626791F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 124KB
SHA256 4b7a24123df22a915f5890fb36b2c70435396035c9296479c1d922a96f88cd3b
MD5 a1e7a2c27a1c9a6504f11d22807aa167
SHA1 bbd6f71233d89c4163ee270a73c7f273224f2133
SHA512 9854765d0e659488d47dc2263a1a6616bd364e102ea9d457d8944c9abade83b885ab6e6ce34fc19b3570f72e77d9d25674f0da3eed5ef7ed411f7164453d8c9a
SSDEEP 3072:5X5ojdiex6bP7MMk4am/mfe06ZYSDryELNP9Oo+lHX:fojdDx6bPYMk43/mkBOECo+JX
TLSH
T1F2C3123554702EBC8B6DDE01B11F989FFE7E42032C28CAEAC450294D85ADF99626791F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 124KB
SHA256 c580e8d613ac97bbd46b1e9d283932e6466ae351f2255107df9bc1ac46b6e322
MD5 1a310b30229b24f97d704036cab4bed4
SHA1 9378284d1a052c710cb8473630192d2107f87f75
SHA512 ea8d28f1744dd155fd399c0c6a1cb5fc240b852dd1328a05fe4088e074edc0cd7f6404a4a1bde786013326f88f6110c6c5637cf9d7e10751fe6ebe81d0d615a7
SSDEEP 3072:585ojdiex6bP7MMk4am/mfe06ZYSDryELNP9Oo+lHX:+ojdDx6bPYMk43/mkBOECo+JX
TLSH
T1F7C3123554702EBC8B6DDE01B11F989FFE7E42032C28CAEAC450294D85ADF99626791F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 6e33c0cd40734131358043fda9987c59ce66fd24902835f6c04785267de06381
MD5 3fbd771f08e79e404c75d6a79a7f3907
SHA1 18085062d0cdba1b298a86e89b57ba387d81bd38
SHA512 a60c5d95c2c2839efc29c334aea0fddbec14655ed471d707bb76fac0fdd435c72e75637fe8650654dd57b90df963e0e36b3bb211f99ba395112ef17edfbfcb7c
SSDEEP 96:mC0d+Ar2aetJRxW2rgj0+f+U+/EfezeRDotok5CVDsB6JGyvTNm6zj4+PEhiv4a:mC0Nr7OJRPrL9/EtDUDkg9Imgj4+shM
TLSH
T14EA12932647E9CB749B38545F5563B47CFA4B16B9A21BF8499ED2B0C10A70DC1382A23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI58082\VCRUNTIME140.dll
Size 117KB
SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
MD5 32da96115c9d783a0769312c0482a62d
SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
TLSH
T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140_1.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI58082\VCRUNTIME140_1.dll
Size 48KB
SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
MD5 c0c0b4c611561f94798b62eb43097722
SHA1 523f515eed3af6d50e57a3eaeb906f4ccc1865fe
SHA512 35db454dbcc7ed89842c0440b92ce0b0b0db41dbd5432a36a0b7e1eddf51704b1f0d6cff5e3a3b0c3ff5db3d8632fed000471180ad72e39d8dbe68a757ccdfb0
SSDEEP 768:vzzO6ujT3MbR3v0Cz6Sz5q83ywug1HDV9zxfYbK9z:mq/oMx3hXHDnzxfYiz
TLSH
T1AE236BA453784486D4AB99B0C0DAEE577D7CFA964B10928F0BA0D15C1F637D0EB3D21B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_bz2.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI58082\_bz2.pyd
Size 85KB
SHA256 d28c3dd1c22bfb8a6e8a6a9c2359842b797d08e878ecb7805f60e86a45589d11
MD5 207d4a4b7a113ef494514918f2dccdf3
SHA1 74b59453b5bb6194e0d2587d26d499d0f7e1aed5
SHA512 f7e5a2608ee19fd400d4bfe27e8603289a219af6a4a4a9e65ebb76c715d926fb9b08293fc2a3fed2195784804764265fa0b356547f23c501ec8ff9487c948b27
SSDEEP 1536:xtMtz7eksNCb6YVVEFxO2RqOyuzotWw8pRbIiQIG3VTy1Ni9QfIY6utw:PMtzSqurjOqqfgotWrplIiQIG3VtKtw
TLSH
T14A837E86B3B462B6F59B81B496910353F730FF960710A3BFB25482863F13B91AF58365
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_ctypes.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI58082\_ctypes.pyd
Size 139KB
SHA256 25d9b0be550d428fecc697ca20450343a7c3ce77c9f5283e9aecfd188d609250
MD5 eeabc0c7756ed7a29e33e467c398737f
SHA1 ec5c401946a9df4e4ab764ddb4639e4e33e1ce40
SHA512 5e1e93545e1be34880fc680ca12004792076e88baa6cac4512fdbbdb90091a9ae441a16b8d24f64c6b03bf14903babddecfa783ce5c016759ed790c0eabc189b
SSDEEP 3072:G/n1qQ8/27N56EBZrGwrb1OzIJswKRW2r7rw8IGGPzoGc:wn1JDT6wrszIJfUDwtc
TLSH
T1A3D38F4B336841E6DA678138C6739E47FBB1F4511A10878F4264C99B2F637A2AE3F315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_hashlib.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI58082\_hashlib.pyd
Size 67KB
SHA256 36ce760b9fac53fe51755f30a68d86f5fde89bf1b66c65c19e04aa3afa404ac2
MD5 dcf15b3e1858d9324be2c719e4e990c9
SHA1 8311c2fb0bb75342367a83fcca7161a0f7fadafb
SHA512 fa2783d0cbbba477a08bf4f2fa3df21d6d0bf5bd5bc7cef25254a3d29fc7d01229337ad5dd54c2f0e67b956fd43953aa98586240102511ddd48d04c674b7ff93
SSDEEP 1536:KXwAzOYBQca7JKs2+C5oIGDIUy1Ni97BfIkxd8:0J/yJKs2+IoIGDIm6o8
TLSH
T1EF635B8AA6984092DA2382B5C9E34F43F974F252271197DF6678C18E2F233C3573B756
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_lzma.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI58082\_lzma.pyd
Size 157KB
SHA256 5f7003f9f0256e36351ca2810b3485db28579b08e4d1d65f6f211fcd1136f395
MD5 cada2b240b280f172aeb32a1666b21e6
SHA1 c15dc39329444433c255309eb89bae188aae1b22
SHA512 8b12298efd28549d46e2c48cff94b07039cf513bbac25063ebad8bae57b96e07eefd7df82229441af142c1b96dc837dec468263c0873d14da280e3ed6e42eb9e
SSDEEP 3072:BJ66g4T5QW7JfyjEqkSkA51b4pznfJ9mNopUpdbQIGI1HFk:BUR4Tp4QPZ8N4RxYOgbPa
TLSH
T110F34C86B794F0E6F7328C38D2624F57E6F578590320929A01CC976D2B1FB759A2E313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_queue.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI58082\_queue.pyd
Size 35KB
SHA256 bb53357b4e91ac23ed4061f15ff3e5e91a5b3be1cbb0c6cf294521ae5b4efa1c
MD5 b04ab24c93d4d045a00ad6f2206b4287
SHA1 2b30376ae320223a4d4f93dfc460a9bae8df604b
SHA512 5033a0a39d0963c9a08a2a66b1522d6d9aba1eda925df7a33a05bcf607c2dd7b190fe3f426fb5c7563a5cc6b44005eb7df7aa81c045d7e5eeb94a0c0375dc0cd
SSDEEP 768:RJA4syt6hB1D68IGRUd+y1KPuBL2Ip4FTxf1mlIJdpS:vNkBY8IGRUd+y1Ni9/fIkdo
TLSH
T1A3F27CCBA7584097EA63C970C1A2DF92F575F7935B0186DF21A8C18A1E233C2A737319
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_socket.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI58082\_socket.pyd
Size 85KB
SHA256 25ac83cac32ed0d67b2cc9672ce64cb53f0a29a75b14c276e901023ff43da5f9
MD5 7a16a21ad11d3e9829ca3b379a2bb010
SHA1 90707b5c1662a1e4553f1cc10ba96c7452def7c2
SHA512 5e0268af7dad1646903ddb5e61fb38896a7ae964cadb38b5c28bc1524a69a87b7c09f501f3f570ec6bf78c8fa873b8fbe062bbe06cf839e32a2735f1efd0cae1
SSDEEP 1536:hcVuncT0XH3XAJtZypxm7XP+66wSzC/jAjI/Lb6NsQ3cs8PgMr8IGGwby1Ni9DFo:SEny2+jypxm7XPz6wSzC/jAjQOsQssV2
TLSH
T19B835B01A66040FAEB77C176C2639E63FBB4B5C01294A75F1466C55A1F333C2BE3AB85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_ssl.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI58082\_ssl.pyd
Size 186KB
SHA256 5c07572df2913618cfb851b608cb5f74d740fcce5c3f2e63dc0a2ba39ab35dad
MD5 e4ba5a52f5fa2a64baec46486cbdcf82
SHA1 ff213b504a70d50871eb8432cea1b22563364cb4
SHA512 111c926a0157d46c48a26da30face546b065eb4afddb6dcf27442fd4f73432808de43978f78f5b297b22a63d82d0d5bf305701e137f6060f59cbd601012e61fa
SSDEEP 3072:FVpZeIk2MZ7IifVvQto7qrvYLrgp8VuMG4eJ9i1zktdsQ/3Omca45gMqTVBOrQII:Bxk2MZZVvQtmL4457qTVMrQ
TLSH
T1AD147B47B5446EF7D802E8BAC6234543FBB4F045331297DE48D6EA520F03746AE6AB63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_wmi.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI58082\_wmi.pyd
Size 39KB
SHA256 0ab1fbcf18c95d70343012feb1aad61e1ba95aaed5b4a08e57fc5990e8a9a452
MD5 99a20947be014e8b4297765f03ed14b7
SHA1 01327b7b1456ecb3d75ce41e403ad870f4391663
SHA512 2841071945712547e13b82f2d7b4d72d25be77f239367dee92f31361478f81eb674e91835f679a266c5ad7b8a63118a3412302dc3fd9cfbd487442c6229fb159
SSDEEP 768:N2/EEqrVmjsOujOQMVQIG3iCFy1KPuBL2Ip4FTxf1ml6Z+7UlFg5yK:IE9BE+jOQMVQIG3iCFy1Ni9/fILKq1
TLSH
T143037D8AE6684092EA6BC574C4A5CE53F675F7D36712838F326482990F333D1E73A325
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_zstd.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI58082\_zstd.pyd
Size 491KB
SHA256 262aea62a994920daf152a10bdc0ca83a8b1c0874e71db23734862431de182c6
MD5 035b0a033dd00dbe887556f4d4b852c3
SHA1 e86cf52d825f9b68177354c54edaa57e962012c3
SHA512 0b428aa10a9e977e07023918870368a9c00e0eb4ab4f7cf1e88950d4aebd2ba5774ebea9f3779d05e370bbe315da6634922834106077d511b710c6131d29dc65
SSDEEP 12288:KccWmYLKvveeFSeX0ro+Q2J5BCl9VNqdp:KccWJKvveeFSeX0roMZdp
TLSH
T143B48D43F29943EDE53BC4B8CF565A13FBB1780B1214965B9395CB993F07B309A6A308
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base_library.zip

Path C:\Users\Admin\AppData\Local\Temp\_MEI58082\base_library.zip
Size 1.3MB
SHA256 23cf159f622dd30a1ee1ebb0d56d483cd7330007c08a2b7cc0ced6da2ee73d5b
MD5 1e237067ff277fe0af4db1056075e7b5
SHA1 fc255edd0e1d178b6f36854d55db3bdaef761379
SHA512 c2a62fdaef0d306d7c82a1e820bc3c50b64a5fdb2af25f233c78308eb59b5fa7788a9971a321f8536086439794c971d8694bbcdeba67e968dc02a0e5042fb06f
SSDEEP 24576:4RpVdnyL7QZkyQeOdP2m2df9lbcOYYNuUFAx:4R/deG/pYUuUFw
TLSH
T111552BA1B9917967FEC9F37A35B75A0CA715C0109B10D303B4A88DAC6FDF260AE558CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcrypto-3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI58082\libcrypto-3.dll
Size 6.0MB
SHA256 53c529145339fb042a3dcd3a09c2d7753204f8b4fc79d99e0d31e69a33985958
MD5 4191d4288230515c5098cc07f699a604
SHA1 bd8b4d48b2f4513dc378bc5a4cf4a3abbc6998d8
SHA512 c110a89ebb5b58126d556ffea1bf01efb4a6dd295f7387665223741a171d9353315de4d361d3d02a186c1c659aee20f46c579efc51b4c41f7282e1b5b4d6d040
SSDEEP 98304:ybM11p6ZVTRwlFh7V6v73WyXTf0W+JJe1CPwDvt3uFA0CaI:ybM1T6ZlalfV6v7GyXbnEJe1CPwDvt3T
TLSH
T1E6566B5EA7A80188E4BAD13CC6534627D2F1F85A5BB097CF05A196790F33BDA2B3D740
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libffi-8.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI58082\libffi-8.dll
Size 38KB
SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
MD5 0f8e4992ca92baaf54cc0b43aaccce21
SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
SSDEEP 768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
TLSH
T10B037C0B458418A4E657D53D97A64A2AC335B9240B60F2CB03D4C2BA3F6B7D6FB7C358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python3.DLL

Path C:\Users\Admin\AppData\Local\Temp\_MEI58082\python3.DLL
Size 72KB
SHA256 22c6e46d8bd563cdb072650901461ef68be2ea6cb1e80af859559d9395a27e39
MD5 a5495a547b4218148914469f1ee65d47
SHA1 91632b2965ae22db25edce6971cf59c0a3a00bba
SHA512 ab1fe6ec0b21fdac78b17afc0fd3a7573b89647a3e4af846448e285a7989342f4a8eaf191a4e90e81a990f10ff1364dd941a0c7f80c108224d8f6c7cf6bb49d1
SSDEEP 768:xHQlHwMvmhZpNVBBr2KyrGYpoQdFxxI4XngqMkf/tFd1WugwBByCsAKyEG+zMRKp:0bTrnXngXMu8IGG0ly1Ni94fIk0h4
TLSH
T168735D4E6B54F8A2DAB629FC78D199CE242B12FC5F2584DFA47CD3D20D1A310A22735D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python314.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI58082\python314.dll
Size 6.5MB
SHA256 fde89cdb5c2d08ae65de7ef4abca1876c93ba3796002f5ac0bf7e4d4f5a94da0
MD5 006b0746b5abaf438d1bc753261c6d2c
SHA1 8f34714617f376cfa6e7e2aedc1e2a73de8c8fd8
SHA512 1c156c3f542de0a27e16ca5b7d6bbd34f2059b380ce85dbcfd5ae3a64de473fd160baba45ca30ad85dfe45742fdcb42aa969cbbaab26a569e324d4e65fb6d621
SSDEEP 98304:xVyDBH+ULEfi0VOuZd+FAX/uv3HDMiEEQn0rt:xVyD1+ULW5VrZRxim0rt
TLSH
T136669D26737901A5D9BB8035C9034647DBB1BC00AB30D34B49A4B6DA3F733635BAEB95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ucrtbase.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI58082\ucrtbase.dll
Size 987KB
SHA256 be7368df484688493fb49fb0c4ad641485070190db62a2c071c9c50612e43fed
MD5 637c17ad8bccc838b0cf83ffb8e2c7fd
SHA1 b2dd2890668e589badb2ba61a27c1da503d73c39
SHA512 f6b727c319ca2e85a9b5c5e0b9d8b9023f0cf4193fab983cfa26060923374c6abd6d11db1da2e524a8b04622a4e13beb4c48dc23f98886d4abb33eb09f3a0776
SSDEEP 24576:dkmZDEMHhp9v1Ikbn3ND0TNVOsIut8P4zmxvSZX0yplkQ:OmZFHhp9v1Io3h0TN3pvkQ
TLSH
T1FB25AE69F76C0AA9C07BE17CC91B150EE9B23406477096DB03E64BB93E2B7D5163B321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1640_627440636\CRX_INSTALL\_locales\en\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
TLSH
T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
MD5 SHA1 SHA512 TLSH

Submit Download

Unconfirmed 394167.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 394167.crdownload
Size 16.2MB
SHA256 e7f59ed30563f7db26e7229d91912e094758ccc326c540dc014e304d2fb57e3e
MD5 ed698451ff49a1a06b0763a761f810e9
SHA1 f91031475520a2a65495919397e997441a721e29
SHA512 73f4a5e3a21a5be37a49d8d21c4c84d9867f32936392f738dc9f95116d801f2ef1061de80ba3d92975694129722eb6a4693de37e2d171a7d6c838947adc6b156
SSDEEP 393216:khLDpXEAphVt4IwQSg+SPmk/h3zxtGvogodjPRvS7dwplk:MfpRphMBo+IhDx4ggod5vS7x
TLSH
T14F0733AC62915AFEE8E7103E1961C520E371B5402F9AD1EF1FB44B041D3FA958E3D2E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2868-925-0x000002348B300000-0x000002348B301000-memory.dmp

Download

memory/2868-923-0x000002348B300000-0x000002348B301000-memory.dmp

Download

memory/2868-934-0x000002348B300000-0x000002348B301000-memory.dmp

Download

memory/2868-933-0x000002348B300000-0x000002348B301000-memory.dmp

Download

memory/2868-932-0x000002348B300000-0x000002348B301000-memory.dmp

Download

memory/2868-931-0x000002348B300000-0x000002348B301000-memory.dmp

Download

memory/2868-930-0x000002348B300000-0x000002348B301000-memory.dmp

Download

memory/2868-929-0x000002348B300000-0x000002348B301000-memory.dmp

Download