eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 00:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
Size 7.7MB
Sample260804-a7ftbss1dw
SHA256 eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86
MD5 4e9e96ebfbd45495b0fb5c7a908a8d5d
SHA1 e4534f93648f61fa1d1e0c97aaa4f7884e88b614
SHA512 ddfc0b6373f74c9bd8d853c385913f39d225508842d440e9f8ec3bf5d98f0e6e69c884536da96ff0f0a343054607cc513d99ebd38b93913ec2b9c5872b834a62
SSDEEP 196608:TH1LVZ7ZBVwWyPOrblxXmDzQcTgrw+t1MocRZfhKUI:TH1LVZ7ZBZ0Orblx2LTgrwy1M3RZ
TLSH
T16586336563F400F5ED6B823A85A7822BD77378222330DADF53A886176F537E01D36B52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 64 IoCs

pid	Process
1368	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
1368	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
1368	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
1368	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
1368	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
1368	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
1368	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
1368	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
1368	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
1368	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
1368	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
1368	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
1368	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
1368	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
1368	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
1368	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
764	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
764	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
764	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
764	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
764	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
764	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
764	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
764	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
764	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
764	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
764	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
764	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
764	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
764	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
764	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
764	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
3840	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
3840	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
3840	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
3840	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
3840	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
3840	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
3840	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
3840	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
3840	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
3840	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
3840	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
3840	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
3840	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
3840	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
3840	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
3840	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
4476	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
4476	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
4476	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
4476	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
4476	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
4476	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
4476	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
4476	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
4476	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
4476	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
4476	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
4476	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
4476	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
4476	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
4476	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
4476	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	dwm.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	dwm.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	dwm.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	dwm.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	dwm.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	dwm.exe

Enumerates system info in registry 2 TTPs 2 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	dwm.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	dwm.exe

Modifies data under HKEY_USERS 18 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27\52C64B7E	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies	dwm.exe

Suspicious use of AdjustPrivilegeToken 6 IoCs

description	pid	Process
Token: SeCreateGlobalPrivilege	7832	dwm.exe
Token: SeChangeNotifyPrivilege	7832	dwm.exe
Token: 33	7832	dwm.exe
Token: SeIncBasePriorityPrivilege	7832	dwm.exe
Token: SeShutdownPrivilege	7832	dwm.exe
Token: SeCreatePagefilePrivilege	7832	dwm.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3560 wrote to memory of 1368	3560	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	87
PID 1368 wrote to memory of 764	1368	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	88
PID 764 wrote to memory of 3840	764	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	89
PID 3840 wrote to memory of 4476	3840	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	90
PID 4476 wrote to memory of 892	4476	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	91
PID 892 wrote to memory of 4672	892	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	92
PID 4672 wrote to memory of 1168	4672	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	93
PID 1168 wrote to memory of 60	1168	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	94
PID 60 wrote to memory of 1824	60	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	95
PID 1824 wrote to memory of 4468	1824	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	96
PID 4468 wrote to memory of 2144	4468	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	97
PID 2144 wrote to memory of 1460	2144	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	98
PID 1460 wrote to memory of 3948	1460	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	99
PID 3948 wrote to memory of 1968	3948	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	100
PID 1968 wrote to memory of 3472	1968	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	101
PID 3472 wrote to memory of 916	3472	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	102
PID 916 wrote to memory of 4584	916	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	103
PID 4584 wrote to memory of 3268	4584	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	104
PID 3268 wrote to memory of 3664	3268	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	105
PID 3664 wrote to memory of 2480	3664	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	106
PID 2480 wrote to memory of 4680	2480	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	107
PID 4680 wrote to memory of 540	4680	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	108
PID 540 wrote to memory of 1496	540	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	109
PID 1496 wrote to memory of 4780	1496	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	110
PID 4780 wrote to memory of 4184	4780	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	111
PID 4184 wrote to memory of 3076	4184	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	112
PID 3076 wrote to memory of 4372	3076	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	113
PID 4372 wrote to memory of 4408	4372	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	114
PID 4408 wrote to memory of 752	4408	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	115
PID 752 wrote to memory of 2620	752	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	116
PID 2620 wrote to memory of 2220	2620	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	117
PID 2220 wrote to memory of 3624	2220	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	118
PID 3624 wrote to memory of 4380	3624	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	119
PID 4380 wrote to memory of 4344	4380	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	120
PID 4344 wrote to memory of 4704	4344	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	121
PID 4704 wrote to memory of 1348	4704	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	122
PID 1348 wrote to memory of 3344	1348	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	123
PID 3344 wrote to memory of 3376	3344	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	124
PID 3376 wrote to memory of 4064	3376	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	125
PID 4064 wrote to memory of 2872	4064	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	126
PID 2872 wrote to memory of 3588	2872	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	127
PID 3588 wrote to memory of 1876	3588	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	128
PID 1876 wrote to memory of 1340	1876	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	129
PID 1340 wrote to memory of 4748	1340	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	130
PID 4748 wrote to memory of 5032	4748	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	131
PID 5032 wrote to memory of 1104	5032	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	132
PID 1104 wrote to memory of 3500	1104	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	133
PID 3500 wrote to memory of 772	3500	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	134
PID 772 wrote to memory of 4116	772	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	135
PID 4116 wrote to memory of 4724	4116	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	136
PID 4724 wrote to memory of 1880	4724	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	137
PID 1880 wrote to memory of 4260	1880	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	138
PID 4260 wrote to memory of 5000	4260	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	139
PID 5000 wrote to memory of 900	5000	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	140
PID 900 wrote to memory of 2804	900	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	141
PID 2804 wrote to memory of 3828	2804	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	142
PID 3828 wrote to memory of 852	3828	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	143
PID 852 wrote to memory of 1720	852	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	144
PID 1720 wrote to memory of 4956	1720	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	145
PID 4956 wrote to memory of 4352	4956	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	146
PID 4352 wrote to memory of 1160	4352	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	147
PID 1160 wrote to memory of 964	1160	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	148
PID 964 wrote to memory of 4436	964	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	149
PID 4436 wrote to memory of 4688	4436	eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe	150

C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
"C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3560
- C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
  "C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe"
  2⤵
  - Loads dropped DLL
  - Suspicious use of WriteProcessMemory
  PID:1368
- - C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
    C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
    3⤵
    - Loads dropped DLL
    - Suspicious use of WriteProcessMemory
    PID:764
  - - C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
      C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
      4⤵
      Loads dropped DLL
      Suspicious use of WriteProcessMemory
      PID:3840
    - - C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        5⤵
        Loads dropped DLL
        Suspicious use of WriteProcessMemory
        
        PID:4476
      - C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:892
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:4672
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:1168
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:60
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:1824
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:4468
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:2144
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:1460
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:3948
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:1968
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:3472
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:916
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:4584
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:3268
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:3664
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:2480
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:4680
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        23⤵
        Suspicious use of WriteProcessMemory
        
        PID:540
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        24⤵
        Suspicious use of WriteProcessMemory
        
        PID:1496
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        25⤵
        Suspicious use of WriteProcessMemory
        
        PID:4780
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        26⤵
        Suspicious use of WriteProcessMemory
        
        PID:4184
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        27⤵
        Suspicious use of WriteProcessMemory
        
        PID:3076
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        28⤵
        Suspicious use of WriteProcessMemory
        
        PID:4372
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        29⤵
        Suspicious use of WriteProcessMemory
        
        PID:4408
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        30⤵
        Suspicious use of WriteProcessMemory
        
        PID:752
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        31⤵
        Suspicious use of WriteProcessMemory
        
        PID:2620
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        32⤵
        Suspicious use of WriteProcessMemory
        
        PID:2220
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        33⤵
        Suspicious use of WriteProcessMemory
        
        PID:3624
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        34⤵
        Suspicious use of WriteProcessMemory
        
        PID:4380
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        35⤵
        Suspicious use of WriteProcessMemory
        
        PID:4344
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        36⤵
        Suspicious use of WriteProcessMemory
        
        PID:4704
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        37⤵
        Suspicious use of WriteProcessMemory
        
        PID:1348
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        38⤵
        Suspicious use of WriteProcessMemory
        
        PID:3344
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        39⤵
        Suspicious use of WriteProcessMemory
        
        PID:3376
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        40⤵
        Suspicious use of WriteProcessMemory
        
        PID:4064
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        41⤵
        Suspicious use of WriteProcessMemory
        
        PID:2872
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        42⤵
        Suspicious use of WriteProcessMemory
        
        PID:3588
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        43⤵
        Suspicious use of WriteProcessMemory
        
        PID:1876
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        44⤵
        Suspicious use of WriteProcessMemory
        
        PID:1340
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        45⤵
        Suspicious use of WriteProcessMemory
        
        PID:4748
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        46⤵
        Suspicious use of WriteProcessMemory
        
        PID:5032
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        47⤵
        Suspicious use of WriteProcessMemory
        
        PID:1104
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        48⤵
        Suspicious use of WriteProcessMemory
        
        PID:3500
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        49⤵
        Suspicious use of WriteProcessMemory
        
        PID:772
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        50⤵
        Suspicious use of WriteProcessMemory
        
        PID:4116
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        51⤵
        Suspicious use of WriteProcessMemory
        
        PID:4724
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        52⤵
        Suspicious use of WriteProcessMemory
        
        PID:1880
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        53⤵
        Suspicious use of WriteProcessMemory
        
        PID:4260
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        54⤵
        Suspicious use of WriteProcessMemory
        
        PID:5000
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        55⤵
        Suspicious use of WriteProcessMemory
        
        PID:900
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        56⤵
        Suspicious use of WriteProcessMemory
        
        PID:2804
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        57⤵
        Suspicious use of WriteProcessMemory
        
        PID:3828
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        58⤵
        Suspicious use of WriteProcessMemory
        
        PID:852
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        59⤵
        Suspicious use of WriteProcessMemory
        
        PID:1720
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        60⤵
        Suspicious use of WriteProcessMemory
        
        PID:4956
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        61⤵
        Suspicious use of WriteProcessMemory
        
        PID:4352
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        62⤵
        Suspicious use of WriteProcessMemory
        
        PID:1160
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        63⤵
        Suspicious use of WriteProcessMemory
        
        PID:964
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        64⤵
        Suspicious use of WriteProcessMemory
        
        PID:4436
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        65⤵
        
        PID:4688
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        66⤵
        
        PID:4808
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        67⤵
        
        PID:2008
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        68⤵
        
        PID:3716
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        69⤵
        
        PID:3812
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        70⤵
        
        PID:2564
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        71⤵
        
        PID:3068
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        72⤵
        
        PID:2460
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        73⤵
        
        PID:1356
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        74⤵
        
        PID:3016
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        75⤵
        
        PID:3492
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        76⤵
        
        PID:4800
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        77⤵
        
        PID:2584
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        78⤵
        
        PID:4048
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        79⤵
        
        PID:2648
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        80⤵
        
        PID:3108
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        81⤵
        
        PID:3148
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        82⤵
        
        PID:1552
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        83⤵
        
        PID:4488
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        84⤵
        
        PID:1516
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        85⤵
        
        PID:4072
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        86⤵
        
        PID:2632
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        87⤵
        
        PID:4108
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        88⤵
        
        PID:2092
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        89⤵
        
        PID:2928
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        90⤵
        
        PID:1232
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        91⤵
        
        PID:3900
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        92⤵
        
        PID:1816
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        93⤵
        
        PID:4316
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        94⤵
        
        PID:3340
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        95⤵
        
        PID:2984
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        96⤵
        
        PID:5040
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        97⤵
        
        PID:1236
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        98⤵
        
        PID:4984
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        99⤵
        
        PID:1116
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        100⤵
        
        PID:2252
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        101⤵
        
        PID:4168
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        102⤵
        
        PID:8
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        103⤵
        
        PID:4692
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        104⤵
        
        PID:2560
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        105⤵
        
        PID:2264
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        106⤵
        
        PID:3668
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        107⤵
        
        PID:3744
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        108⤵
        
        PID:2084
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        109⤵
        
        PID:5104
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        110⤵
        
        PID:1980
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        111⤵
        
        PID:4776
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        112⤵
        
        PID:4768
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        113⤵
        
        PID:1964
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        114⤵
        
        PID:4016
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        115⤵
        
        PID:2608
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        116⤵
        
        PID:4348
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        117⤵
        
        PID:3536
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        118⤵
        
        PID:4308
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        119⤵
        
        PID:1036
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        120⤵
        
        PID:2636
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        121⤵
        
        PID:5136
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        122⤵
        
        PID:5152
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        123⤵
        
        PID:5168
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        124⤵
        
        PID:5184
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        125⤵
        
        PID:5200
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        126⤵
        
        PID:5216
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        127⤵
        
        PID:5232
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        128⤵
        
        PID:5248
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        129⤵
        
        PID:5264
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        130⤵
        
        PID:5280
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        131⤵
        
        PID:5296
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        132⤵
        
        PID:5312
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        133⤵
        
        PID:5328
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        134⤵
        
        PID:5344
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        135⤵
        
        PID:5360
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        136⤵
        
        PID:5376
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        137⤵
        
        PID:5392
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        138⤵
        
        PID:5408
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        139⤵
        
        PID:5424
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        140⤵
        
        PID:5440
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        141⤵
        
        PID:5456
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        142⤵
        
        PID:5472
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        143⤵
        
        PID:5488
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        144⤵
        
        PID:5504
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        145⤵
        
        PID:5520
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        146⤵
        
        PID:5536
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        147⤵
        
        PID:5552
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        148⤵
        
        PID:5568
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        149⤵
        
        PID:5588
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        150⤵
        
        PID:5640
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        151⤵
        
        PID:5660
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        152⤵
        
        PID:5800
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        153⤵
        
        PID:5828
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        154⤵
        
        PID:5844
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        155⤵
        
        PID:5864
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        156⤵
        
        PID:5884
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        157⤵
        
        PID:5900
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        158⤵
        
        PID:5916
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        159⤵
        
        PID:5932
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        160⤵
        
        PID:5948
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        161⤵
        
        PID:5968
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        162⤵
        
        PID:5984
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        163⤵
        
        PID:6000
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        164⤵
        
        PID:6016
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        165⤵
        
        PID:6032
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        166⤵
        
        PID:6048
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        167⤵
        
        PID:6072
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        168⤵
        
        PID:6092
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        169⤵
        
        PID:6108
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        170⤵
        
        PID:6124
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        171⤵
        
        PID:5008
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        172⤵
        
        PID:2688
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        173⤵
        
        PID:4176
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        174⤵
        
        PID:5732
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        175⤵
        
        PID:6156
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        176⤵
        
        PID:6172
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        177⤵
        
        PID:6188
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        178⤵
        
        PID:6204
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        179⤵
        
        PID:6220
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        180⤵
        
        PID:6236
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        181⤵
        
        PID:6252
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        182⤵
        
        PID:6268
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        183⤵
        
        PID:6284
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        184⤵
        
        PID:6300
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        185⤵
        
        PID:6316
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        186⤵
        
        PID:6336
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        187⤵
        
        PID:6352
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        188⤵
        
        PID:6368
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        189⤵
        
        PID:6384
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        190⤵
        
        PID:6400
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        191⤵
        
        PID:6416
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        192⤵
        
        PID:6432
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        193⤵
        
        PID:6448
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        194⤵
        
        PID:6464
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        195⤵
        
        PID:6480
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        196⤵
        
        PID:6496
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        197⤵
        
        PID:6512
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        198⤵
        
        PID:6528
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        199⤵
        
        PID:6544
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        200⤵
        
        PID:6560
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        201⤵
        
        PID:6576
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        202⤵
        
        PID:6592
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        203⤵
        
        PID:6608
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        204⤵
        
        PID:6624
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        205⤵
        
        PID:6640
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        206⤵
        
        PID:6656
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        207⤵
        
        PID:6672
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        208⤵
        
        PID:6688
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        209⤵
        
        PID:6704
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        210⤵
        
        PID:6720
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        211⤵
        
        PID:6740
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        212⤵
        
        PID:6784
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        213⤵
        
        PID:6816
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        214⤵
        
        PID:6832
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        215⤵
        
        PID:6848
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        216⤵
        
        PID:6868
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        217⤵
        
        PID:6892
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        218⤵
        
        PID:6920
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        219⤵
        
        PID:6980
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        220⤵
        
        PID:7016
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        221⤵
        
        PID:7040
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        222⤵
        
        PID:7064
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        223⤵
        
        PID:7092
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        224⤵
        
        PID:7120
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        225⤵
        
        PID:7140
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        226⤵
        
        PID:7156
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        227⤵
        
        PID:4356
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        228⤵
        
        PID:5708
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        229⤵
        
        PID:7172
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        230⤵
        
        PID:7188
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        231⤵
        
        PID:7204
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        232⤵
        
        PID:7220
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        233⤵
        
        PID:7236
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        234⤵
        
        PID:7284
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        235⤵
        
        PID:7304
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        236⤵
        
        PID:7320
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        237⤵
        
        PID:7336
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        238⤵
        
        PID:7352
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        239⤵
        
        PID:7368
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        240⤵
        
        PID:7384
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        241⤵
        
        PID:7400
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        242⤵
        
        PID:7416
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        243⤵
        
        PID:7432
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        244⤵
        
        PID:7444
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        245⤵
        
        PID:7464
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        246⤵
        
        PID:7480
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        247⤵
        
        PID:7496
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        248⤵
        
        PID:7512
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        249⤵
        
        PID:7544
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        250⤵
        
        PID:7600
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        251⤵
        
        PID:7672
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe
        
        C:\Users\Admin\AppData\Local\Temp\eb9261b142489e6d9613015c9f19aab98490d8181f4b466fe68cd4e0f5bc6c86.exe -c "import uvicorn"
        252⤵
        
        PID:7704

C:\Windows\system32\dwm.exe
"dwm.exe"
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
PID:7832

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Guipro.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\Guipro.pyd
Size 304KB
SHA256 b7604fa34e630e619fa95d8ced322f9d76beb1124dbac6266ec2e7de25a58865
MD5 e653b499e7366da663245dee59b29f3c
SHA1 d755414d27c9306c80d026b4fd53bee1d0ff5d01
SHA512 f9b7bfc6ac6bebace820558c1cbc4edc447741c6021099d509062d748dd831c0e0d792c717a507dc2848bdf16c861c257a1f75e444b53a237bb5221cced88749
SSDEEP 6144:il6AvFoLZQTFDtTtXPF/C05dYGiToWQ/eu+jnbDi0:icoVPwBGiToL2hb2
TLSH
T1D164081A53A99095F97741BC8C37A963FFF27980A7643E4F4220C9442B93E61B7EE701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LIBBZ2.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\LIBBZ2.dll
Size 183KB
SHA256 e4ba6a29fe1611815b74da3fd55bd657564edafac7a9907b0819ff8fb091eed5
MD5 9ecb733cf14bbff80b005ddb38540497
SHA1 2f725f35a6602dc6a70a8339e90721d9e37dadb4
SHA512 1dc0e845b47483faca748efa6ed956570c0d00c5909f3b25200d653b5c42a1f0086426ce1f483af32c36ec83043fa8cfd1577f3823568f9faeafe438f41b9a40
SSDEEP 3072:FGwfTLhJAJ/EBdkoHKJpKtRYt0TOV9sXYl0PANcHy1kZwrW29KJ+lc8ntVO569MW:IwfvhJAJ/EBdkoHKJpKtRYt0TOV9sXYh
TLSH
T155048E80B3A658BDDC278178CA570906F3727C220761EABF03645B3A9F6B7A1653DF50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\VCRUNTIME140.dll
Size 117KB
SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
MD5 32da96115c9d783a0769312c0482a62d
SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
TLSH
T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_bz2.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\_bz2.pyd
Size 23KB
SHA256 4ee037c1330ffd4f90a3823494e6ea06eab2986b78a43ef665dcc0682782dbb7
MD5 ae105ac64931df27c940a3a47d47c9a0
SHA1 9727ecc636a6f1f0106468942001227d8b1790d6
SHA512 daa2a98bcd27ddb82a137829e9cac9ce4283d1f568ac967501803b531e4f8ec451d9992d19d8d6138842d4905276a9e3625ac7c39c3c09b027edb6166131074e
SSDEEP 384:8oYbjEdBnlvDdeBiPXdYFr+Qv5BhCIo3gojJsMYpv4O8num3a0sjSILCV:5Td30BiPpK5BhCIo3ga1j20ISILCV
TLSH
T1C0B24C2AB76800E1E17792B9CD635B1ED1B2F9111711838F521DC37D1F23A92BA35BA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_ctypes.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\_ctypes.pyd
Size 114KB
SHA256 edb3d5e2783672c68798252028301cbb74b56cb062997b65266ebba3494d312f
MD5 ac51b70937b77173a2c19b127f04d39b
SHA1 b3d517975e5fc8f60ba57d69b812bddd2ce0eedb
SHA512 22f7a0edd7a897be4ef8a90af38e28c0374766ba359e45ea88f8596ebb69ea5d2ff362e337d327dace8e1aaf265a3ef688a7ef97f121bc008de4ff42e99816a7
SSDEEP 3072:bhKXcK6KYh4UXcMqiUzE1tDzUf5s6G0sE5hm7zILLP:4XwYUHUmEf5sPEPu
TLSH
T164B33A8A339800D9E7A351B8C973AE12D772B8551B1087CF06A4C36E1F637E66E7E741
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_decimal.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\_decimal.pyd
Size 249KB
SHA256 d2c3901341ecde2871053fa42c7ccd61e380b66a28027941538356c4387938fe
MD5 4193cb3ca5c1b2b37bbfa097d4157d94
SHA1 8737d02ed9fc0e32d4e10bcc9ebc2282e74d6832
SHA512 e148edee388bfc46b11272a6f3e1815d4be9ace80f0f29abd72296b94f96cc9557742f2a28613210cf99727a4581e798d5b071b2c3346c8999985f8ae809593b
SSDEEP 6144:8ub8BPtVFk2m4UzTcD5ULVOWHqfKK3X+W5AoX4zE6D:3QQ2m4UzTcDCKCzEk
TLSH
T1B3443B6552880874EAB7C0784987D657EBF3B8550710DBDF52B0CA9A1F43BE623BE702
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_hashlib.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\_hashlib.pyd
Size 48KB
SHA256 78ae93356a11e2718f5aeabed96f3ff5e4ae188b966d49823517d79cb167de10
MD5 c7b9396d75bf82c26ed9aa91eef60036
SHA1 b8b0934ea9c956f6727bb4f24a3acd84af8ba0df
SHA512 90bfd5deca1a454bfde3df894934d0bbbe5c62a696c705a583489f27e87cdee3b3e6cf880ca16829dfbe661d1334c6f28192c1df4622bd6e84ad8bbf94209bd2
SSDEEP 768:aQs9PawuqTDXblf3lNlwhYSNxWPjjrE1DpS92KtFJboeQNfqLPyo0IaILOI:nsZk2Dx/LlCpnmvrE1DgPtDboRNfqLPf
TLSH
T158234A09A6C480A9D4AB92B9C9634F46D5B2F001335577DF83A4C2CE2FA37D35A7AF41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_lzma.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\_lzma.pyd
Size 34KB
SHA256 7a37c52cc48da498abe2273423988922a900a7afa44c98ea662d3213a6da0c12
MD5 554ca685828aa23caf883beb1f43a273
SHA1 c0f3ba5ac17769b07cf9bfac09997caa0aeb9c22
SHA512 2c628483e85e66a0c15e13cbf9d9e1489f3b765265396db8ce7c200df94f6f80396181b72f9eb0817a5ca463cd484876072ec52c8e781169b30a04081113c892
SSDEEP 768:334uM5nd3YbGSJVf5r2rlb0m6+3XKc3f+94ZXMpQ0ISILZ1:3ox+GSJVfIrkUXnfG4ZXt0ISILZ1
TLSH
T11DF25B21B76401F5D1B68179D9179E0BE6B5F86117A043CF1268C29C2F33B92EB3AF91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_multiprocessing.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\_multiprocessing.pyd
Size 21KB
SHA256 c90687c047713b0da85504ec6d2d7aec2c4bac5e4147a95ef0dc60f9993084d1
MD5 03c37361b5148fe005b7cbc102b613dc
SHA1 0747334d5f89e996d6a9e496f57cfe78ebc0b399
SHA512 2aab9d34b2a4a60acb4070c4b4eddec6b9596963b0a330e19d3a842c85cc11125b159fc87938258e8f8da50b892760c37d90242eb8f5bebad90fa9e291c7ec43
SSDEEP 384:4A9PKRZpEC7Bvg1VcZsXy94ZqchBwoZ6kuIDA/xwa0sjHILWBL:4NNf2VEsi9cP2edHAxZ0IHILWt
TLSH
T175A2290AB66C20BAE03682B6C4636F55E572F53647148BDF1738829E0F737C12776B86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_queue.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\_queue.pyd
Size 19KB
SHA256 b7d81023d0ca6516b18d03242bc0e19eb25685dde8399184d3aee010272ea654
MD5 a9c70e9a437a523ca8282fff3626ce4f
SHA1 296366b974be62038d5326cca3f027bd206ad4bd
SHA512 7250d8398e044e87fc10603d86ed8215e3a6814add9053ca2205d78e3f2ab407e31bded9b615600555e646e4240097cda43efa00f5ba6af6981b3476fc483077
SSDEEP 384:qVDKm06qjbvj/NunioEI67mtpO/W6576rDKGrYpJnJNDva0sj2ILQU:2b0v/MZntpO/Wy6rDKGrA/C0I2ILQU
TLSH
T13E923886B7B840B6C076C2B5CC735F84E476F596471293DF2278826E2F137816636B92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-console-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-console-l1-1-0.dll
Size 21KB
SHA256 22b0d0412c274a04d11d7fd3f6545eff245e6f032e21b86d920c2844dd1007c6
MD5 8805de8aead10a48193b54f882a7763a
SHA1 b4e55947787eb9cdb5998ee1b77c3bd14a35accf
SHA512 284d835a01a0c98b16f717e0eaf962a559ec2158a673402ab29b96ec37785728bc70496c07d0c683c51a7f1a3880660de6ef52da326aec641578fb7cfb19f458
SSDEEP 192:QFOhcWqhWDWJWadJCsVWQ4mWnkV0NVAv+cQ0GX01k9z3ARoN9Hig:QFlWqhWaCsB0NbZR9zQoN9z
TLSH
T123A23A934EB88143FDABDDB046A8EA437C3E6BC65950A05526E8F55D2C933C0EF1472E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-datetime-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-datetime-l1-1-0.dll
Size 21KB
SHA256 631a106755f13a78032d7c17cd19c5185fe89d93fda2ac108c4f53e27dcdecdb
MD5 1754ecb52a0c9fb6f11c43476975be9e
SHA1 93045ea061f23421d61b14ab2b89eb618c0e6daf
SHA512 4bd61029d4fe1a55d2a89fbc900107751a0753434d8ea25cc947131205c7f610b44e3e7bd2f2c5fda4db0ae6aac3bb0ec6a4c0b5ae1c602c597e8bf1328d244e
SSDEEP 192:dWqhWEWEXCVWQ4cRWvBQlxwVIX01k9z3AROGZ4QX:dWqhWPlNR9ze/4
TLSH
T1A3A23A825AFC9043FD9BAD7012B8DA437D3C67D71E50A16B06A8F04819837D0EB24B7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-debug-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-debug-l1-1-0.dll
Size 21KB
SHA256 1ce185afeea0a30a12b496d95df395c18bd0e99570c0ac3126758476d4b6aea0
MD5 31b55653d51de75f30be2eea85aead0f
SHA1 b9d3501a06d37110c281fafb433dd2fc26189447
SHA512 0bb69ccf98ad9db6fd1e2ec4a2a436f2da42c1e949c8941f780515787a1a560f696aed1a9faf1b3fa2a96fd59f3c51f6e9a59186e1485b47687828a0cab2140a
SSDEEP 192:VWqhWKWJWadJCsVWQ4mWSdyttuX01k9z3A2WIfDv:VWqhWnCsqSR9zfVfDv
TLSH
T17CA22BC25AACD142FDAB9E3053E8E9533C3967D61D50909905D8F4982C977C1EB24B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-errorhandling-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-errorhandling-l1-1-0.dll
Size 21KB
SHA256 cdbc9ee30658188fd9af68ad52b5d8e7f59111191b0681ec2ed9095d9c85ebee
MD5 a575281e93dcdc2f95857b7e2b365361
SHA1 379a88481d2d2efa2e6e741add7a82b217865b87
SHA512 44f4409cd8eca2c18da44e99ecc87c7dcd20b30f1ee9983bb504cfa4121e95521d11a2bacc63d9fe18008ba629bc464d3c715b9720603813ecd3b6098a395906
SSDEEP 192:WzmxD3T4qLWqhW2WJWadJCsVWQ4mW/CyttuX01k9z3A2iV:WzQVWqhWTCs2SR9zf6
TLSH
T1E8A21AC69ABC9143FD9B9E7016A8E9437C3D6BC66D40909905E8F5682C973C1EF20B2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-fibers-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-fibers-l1-1-0.dll
Size 21KB
SHA256 938a52984e7e9ffeef350a794907639d453e346d5bdc0aec8c1360d040cc672a
MD5 b4c1a9ef2cf923a81969faf2f74e5c18
SHA1 84d4f2141b89afac5d8d14277b79c4f14e6cbb3c
SHA512 c4402b4a5bdd751bada7a96d48d7a3679447fd455547a874e95a27b0b7686d89ddecad2a5097daa7d0e305557514219bcc6e126fefcad52c3ff16ac69368f4e6
SSDEEP 192:nWqhWqWJWadJCsVWQ4mWG9nhftyttuX01k9z3A2C4Zuo:nWqhWHCsRMSR9zfl0o
TLSH
T145A21A825AB88143FD9B9E7053E8E9533C3E6BD71D1090AA05D9F59C1C973C5EA20A3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-file-l1-1-0.dll
Size 25KB
SHA256 f36025fd0715ec893c112f06472072c565385b8c5fa675cce5b4a9158bfb87e9
MD5 8142799f92638d67267278d2fcab85e0
SHA1 122da2ce08042e8484e2584cba30fe528dd3b94d
SHA512 1d71763f14ff6178cf17f71fdfb47a46522e20c92ca3b86d1b722f9a704354f3b0e7a73ab6b891d531bed8c9db844c677c4f9dbcddced27487e2439d654ce7a0
SSDEEP 192:1aNYPvVX8rFTsCWqhWwWJWadJCsVWQ4mWM+KfKUSIX01k9z3AEXz58L:7PvVX8WqhWdCsp2IR9z5e
TLSH
T102C21A93D9B4F24BF8CFDE7111A6C9436C355382041494CA1BD8D7AC3DE7386E3A86A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l1-2-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-file-l1-2-0.dll
Size 21KB
SHA256 3d95961590fe6da5c569bcb0a54651488e70dd7b15c257e1b9faf8a3cc0e63e4
MD5 75c8a3c1dfe2096f1a2c6ba51de7196f
SHA1 eb17720383791d75ccc2ed729900c1e8e8165504
SHA512 8c6af5c49a321d60b14032780bf6d93a51ed7fe97940e06dfb251d295f51f2788cd7931a848cea94607d81acb9bb225086dd879159e67cda0c355173e69543ea
SSDEEP 192:5TGaWqhWRWEXCVWQ4cRW2IrmhHssDX01k9z3AaHKtY:5qaWqhWOlHFDR9z9HKy
TLSH
T1C3A23982856C8143F9DB9D7042E4D9577C3D67C71A5098AA55E8F5882D833D1FF30B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l2-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-file-l2-1-0.dll
Size 21KB
SHA256 c6515fb573cd8190ebc401aab4646069066205ee9eeca548ae5ddbec3633336b
MD5 855bea02e0a624407c36b109b841db59
SHA1 d812734104a7fcce9ef86ba9239d106ef8d27395
SHA512 23a14f6c86a8f986322dd1f7efee0b9a20e12e6d141994d3fd165d0df22513d63efb3fab8945879466b053f09fe0d2153c183c1d738530844eec465318e94ff1
SSDEEP 192:aXWqhW9WEXCVWQ4cRWRXbShHssDX01k9z3AaKrm/:aXWqhWqlWrSFDR9z96E
TLSH
T135A229C29AAC9143F9DBAD7092E4D9873C3D63C71A50855A4AD4F9882D933C1EF20E6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-handle-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-handle-l1-1-0.dll
Size 21KB
SHA256 523b4c1528aab62c5f8622e4e2c4a4ba0df43114098a05f0c58c69c716c42626
MD5 5f0f6443699fb844cd2a6684ce279b6d
SHA1 ccc04dad19cfdd7f3cf895025d038e0c509881c6
SHA512 bd03582d208403f245e24d47a8f2ac818f5853ca9438912af718386b48eedf4b8d01a3579e67a46b7214fc343e06301d54148893ea00ae822eee95ade448674d
SSDEEP 192:zzWqhWkWJWadJCsVWQ4iW8RJTyttuX01k9z3A2AAq:zzWqhWxCsqSR9zfAAq
TLSH
T1B9A22AD696AC8143F99B9E7043A4EA937C3D77D6580090AA05E8F59C1C973C5FB20B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-heap-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-heap-l1-1-0.dll
Size 21KB
SHA256 4fff338c18ab8a1a37d1190e3b9edcca55afa86b0ba0f97d87c4c841e4e29678
MD5 c5de5376fe71ca643e633505209da913
SHA1 83ac568295bacc264e40586306f2facb2e778304
SHA512 2c04fb85b1b5c047d456b61b178aa486c9a8801408edb8dbd20fef4e1e125d140a30ee6f40dc0e850cd717529fd0e7bcd3e88a0f018ff1602beae4db01df1458
SSDEEP 192:OdxlZWqhWcWJWadJCsVWQ4mWlhtNyttuX01k9z3A2bjTmd:OdxlZWqhWpCsctsSR9zfXq
TLSH
T1ABA21BCA8BA89103FDAB9E7053D8E9533C3967C61D5044A605E8F19C2C933C1EB39B2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-interlocked-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-interlocked-l1-1-0.dll
Size 21KB
SHA256 841aa4632552c47b43d453968da2c8d0861b1eb776d530a4e985d0290516d6c8
MD5 26dd73913f6487700025e760df6402ee
SHA1 055e26cc1b985f0215a0eb5e6153e6cc9f76f2b0
SHA512 d073e118f08216d6c7b39ddfb089353377032080f8e0447a66abf62f97939084c2ca957ce1d65ec3479161cf3385c5b82cc7000a29a2d856f319ef9115d550a7
SSDEEP 192:vwWqhWrWEXCVWQ4cRWLnkVXC4dlgX01k9z3AUj7Wrorw4C:YWqhWglLVXC4deR9zVj7m4
TLSH
T154A22A8296BC9143FAEA9E7143E8D9937C3DA7D71940916646E4F09C28C33C1EF34A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-libraryloader-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-libraryloader-l1-1-0.dll
Size 21KB
SHA256 e989c62edade6b3333d798e0481f4c2ec08f7d2a0c47acfcca2a869cd4b68a1f
MD5 9bfa838217a723d82f2139bd9fa92169
SHA1 e59d149cb6e7149768305a174a14531406c79686
SHA512 55deaf735ec62bf652364d3a281a98516e967a1f6fdc5d691864766b1e4cf2e31ab64f48dfc79eb89bb3cd1ff7e59af5e6eb22fcbe0761e708b5c5035b96b62a
SSDEEP 192:TTvuBL3BBLAWqhW+WJWadJCsVWQ4mWddhaNVAv+cQ0GX01k9z3ARosp5/:TTvuBL3BaWqhW7CsmaNbZR9zQosp5/
TLSH
T14CA22CD28B6C9183F9EE9D7042E4D9477C3A67C79D10946946D8E65C2D933C0FB20B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-localization-l1-2-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-localization-l1-2-0.dll
Size 21KB
SHA256 945dacfe53f62d83acd0537a6712658558faafb18f68b76b88127db78482fd8f
MD5 7f629d273ac801725d19df76990a68df
SHA1 dc6ce7553e3ccecbc2f74cccb6760a9fae910594
SHA512 af51a9f8704d909185601c642d966cf99f53d2867dd4c5326f602ce279fcde916f9ef1d458740242c02078f9bc8867d8cb8a41332590c45983ddf349d1cfb05e
SSDEEP 384:jnaOMw3zdp3bwjGzue9/0jCRrndbnWqhWnCsYONbZR9zQoQvte5:mOMwBprwjGzue9/0jCRrndbtkFT9zIvK
TLSH
T192A23B92CBA8D34BF84DDD70316BD8433C3967850951A89507E5FF2839E3385EB60729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-memory-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-memory-l1-1-0.dll
Size 21KB
SHA256 a505bdf2e4dfd5120de230fd9d159ef75aa00fb3f98e24d259f5c0a456713c74
MD5 e80ab3c9dfd2574944f7e823b99d9ca3
SHA1 3b22f5cfaaecde9890dafbadc40a862215a62e71
SHA512 8f756d323932b6db5b29c0b50a313fef7417dfe7173bf21dce756de7ec62235812e00d321cdfd0cc20e88b21a9fd6edd8660df68ac87052f6e7fc5549c3fac81
SSDEEP 192:N0WqhWbWJWadJCsVWQ4mW22gyttuX01k9z3A2N9m1:N0WqhWSCsIFSR9zfNM
TLSH
T111A22C8586BC9107F99ADD3057E5DA477C3AA7C71C9094A902E8E1982CD33D5EB30B2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-namedpipe-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-namedpipe-l1-1-0.dll
Size 21KB
SHA256 b26de5e517b05e10ee34fdf4996f82c465668670329e7f19d21f39a7e39011e7
MD5 e6afcee6449426ec7aade8946d995f00
SHA1 e23ca56ec0e593c72d5f409707368fac5531a7ab
SHA512 a4f08b3115e5bb60cacabd4801577b52fa25d33803b1b7b6ac9e8663ed4aec62b745362bd7ea28186d18a77362ea0f5fa452200d4744535006300b108ce8e841
SSDEEP 192:WWqhWUxWJWadJCsVWQ4mW5iwNVAv+cQ0GX01k9z3ARoMRJ:WWqhWUwCsoNbZR9zQoGJ
TLSH
T158A23C928A6C8182FDAF9D7052E4DA873C3A67CB1D40905516E5FD5C2C573D0EB34B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processenvironment-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-processenvironment-l1-1-0.dll
Size 21KB
SHA256 32d11f07156248c7906027e0f17e93e51de848f136e6d3fd0d4f9d1ffb2c70da
MD5 162689d6edafcb3eb00fb50d01ee5287
SHA1 30f20bec95041f904fa2f566700d1dff436d5021
SHA512 1f7730a291281db1c47a374eef5080c7f4ef47eb51075b05f148545d14ff05fe03510b9b11b807ef32bdee6ec24bc386f5e2a032bb5e5faa8d10375de32af0e6
SSDEEP 192:+EFP2WqhWcWJWadJCsVWQ4mW53DvEe0yttuX01k9z3A2apIg:5F+WqhWpCsKVZSR9zf2Ig
TLSH
T129A21BC295BC9106F99BAD7042E8F9673C3957F71C4090AA05E8F65C2CA7351FB14B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processthreads-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-processthreads-l1-1-0.dll
Size 21KB
SHA256 562e2619e1e685080faf2122c12ae3c35202ce34ce8330d1ff0a3b566095fd38
MD5 953139610362f102b41b125ea7208070
SHA1 ee5ae26c8909923691f6673cd2385c567b9339c0
SHA512 e7d72b31426438a045521f84b262f2f8093f63438a10893777f7660bb9e570794a2e278edfaf697d3888b12a88854f4c6c4028310b278e60a3e2abf328ba5272
SSDEEP 192:yMck1JzX9cKSI0WqhWUWEXCVWQ4cRWp4bfAgfcMbnoQNpX01k9z3A12hl:Hck1JzNcKSI0WqhW/lJ/7R9zW2/
TLSH
T1A0A219D685BC9283F8CEA8707295ED533C3A97C61919907106E4F6993EEB3C1E638138
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processthreads-l1-1-1.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-processthreads-l1-1-1.dll
Size 21KB
SHA256 73fabc60a9b24c1eb65ec886a59a190046af5853800572df1d48634417a15729
MD5 6362e38d6c8138711da8f3be9bcc72cd
SHA1 b0827e51f1a45cdfed76e7636ea334255d7ddbeb
SHA512 bac37bf61221355a1b43a7e7b3a65ff6d08790898e7e9719f2a776ee55db0cfe036d721d216bb95454dd1375c322298eea54fba2054d9a41e3aad6d60ec41507
SSDEEP 192:EkDfIeUWqhWOWEXCVWQ4mW+ZUx6RMySX01k9z3AzarZCB3p3:EkDfIeUWqhWBvMR9zqaI3F
TLSH
T122A20AC2A9BC5002FDDAAE7053A8EA533C3DA7C75A20D46515E4F59C2DD7381E720A3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-profile-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-profile-l1-1-0.dll
Size 21KB
SHA256 2401cc9407ebb1fa60ddf520d422ec1eefec050dd9871554756c869c9b730558
MD5 4649d1ad31dd375bfaea35c9423f1d96
SHA1 a4736638f443aca260205dfddea3635ee2380a26
SHA512 1f98f8945b3f3ac852090a559095c95f36ff234672e871c95c2a8447e321890f5e6b244ee67d3e24a09cce2c809848e2d19fc2c7d54ace97ee0ba5d6f396a8d6
SSDEEP 192:bWqhWqWEXCVWQ4cRWrRhHssDX01k9z3AauEt:bWqhW9lOFDR9z9u
TLSH
T17CA21A82D66C9147F8AAAD7052E4ED933C3D73C76A20D56A45D4F4982D833C5FF20A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-rtlsupport-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-rtlsupport-l1-1-0.dll
Size 21KB
SHA256 b5a61cd60ec9088ee27bf61d37c55abc9d6db3f722616d74fc191cf671a4902a
MD5 251d9a3f3ec2e5a8997ce8d7450e443f
SHA1 f6cac92e67b976f6b480c530b501e9f0f18e7d81
SHA512 cf956d4fd0713970e050a1259c5e3495125a64e8a75d26f8b3a6c9b64954f0c1e5e349352443652c3bb21feb2ffec4145eb58cbfc16e2600d1d23ee4ca6425c6
SSDEEP 192:RGeVPWqhWUWJWadJCsVWQ4mWUhSfyttuX01k9z3A2vUEC:RGeVPWqhWBCsvRSR9zfNC
TLSH
T1D7A22AC796685042FD9B9E7052A9EA977C3A6BC22C44907A05D8F59C1C933C4EB24B2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-string-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-string-l1-1-0.dll
Size 21KB
SHA256 7e97fbf5cee26ab01227d564f023337736310868c1cf23920e4dceeeb1c11701
MD5 575eba56aa4c2e409d643f719cd1dbba
SHA1 86a8b08c70a5b095b603211a706148ca266951a9
SHA512 67778ef6ea653970dd17d4bf4272a408a7626f8f994cd1a781687f9a7398765df6e0079663ca66e9be80a324ec467c1145f8b6e49ccf52cd6fb8bf8bfcdb2f34
SSDEEP 192:fVZyMvr5WqhWyYWEXCVWQ4OWRyS0VXC4dlgX01k9z3AUj7WyZr:dZyMvlWqhWyzrS0VXC4deR9zVj77Zr
TLSH
T1CCA24BD2A6BC9043FDDB9E7012A9E9937C3D6BD7195091B646E4F09428C33C1EB24B2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-synch-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-synch-l1-1-0.dll
Size 21KB
SHA256 4f47aad2664ed21dd80d30ffd954a34503ffe2493bebb39da058d452212e75af
MD5 d6dad6b6adb40eafdb89da01acf6742b
SHA1 7e2af9f5d2ecd518c8de7249ad681a7b30221a55
SHA512 e226db47322494cd3315baad6ff0ce3537d4992fface18b7a4bd7a2eb8b4806757b3fc1571437fc52efa72339572eb9e254599c0aef475e88ecf330fa8bf5b75
SSDEEP 384:jUwidv3V0dfpkXc0vVaCsWqhWjCst2IR9z5b+eOD3:4Hdv3VqpkXc0vVaPXU9zVi3
TLSH
T16CA22A96D2E4E247F8AFDDB042D6C5536C3427C30960987746D8EA9C3DE33C4E724A2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-synch-l1-2-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-synch-l1-2-0.dll
Size 21KB
SHA256 a885774d4a5419db2e9f7fbd0ac06f7244e046aa614cd6585ab22fc428f2c7ee
MD5 35f6657e323c4e5ac56e7697ea3cc54b
SHA1 696092f39a3f11a44df634ea3ac3ee4fc1b9acc2
SHA512 4478d43814eb87473874eb757c61d21cd1ca2c13a1644b3ab5d29b45e28007f03a04a08b987b57f9bdc2913c4bdbccec32b94fae72f5af62e7c7b94c850cb2d3
SSDEEP 192:LtZ3xWqhWqWJWadJCsVWQ4mWfHpyttuX01k9z3A2bcU:LtZ3xWqhWHCsM4SR9zfbx
TLSH
T181A23AD68BA85243FC9BDD7047E5E5533C3A6BC21D50945A01E9E1AC2CE73C1EA20F2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-sysinfo-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-sysinfo-l1-1-0.dll
Size 21KB
SHA256 ac3b86a3e66c5ae2cb30d8a386b0574e6b59fe0f549120c16b7790c3489bc593
MD5 dace0193b6820ed7812f7346b9382c05
SHA1 ce9d597e3239d88544dc4eb61ce59605a2d82ae0
SHA512 82efb9c2d9fe612c9cc6cb681eeea9b1080fa70fe7f86c8c4bd48ad98ab100aa35b498191e4048da6073ed22ac298b341a61a1be26f52cff2aba64b5c419072c
SSDEEP 192:laIMFSYWqhWjWEXCVWQ4cRWA4Gc8aXAgfcMbnoQNpX01k9z3A125bu:ldYWqhWYl2/7R9zW25b
TLSH
T133A22C9296BCA102F89F5E7012D9DA433D38A7D72900C15A07D4E35C79E3389EB3463E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-timezone-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-timezone-l1-1-0.dll
Size 21KB
SHA256 003751ed79881bce98017b66206a2ba411321edd61fd51768779f29dfa99968d
MD5 ef40498ce0b6cf020d9ea8ed88992584
SHA1 2fc258982ffeca396e50bff27a4b2e283c14b051
SHA512 95c8573b336f2f2fb5ec580340af406a0742d73d4a3d160b22436dfc0bebd36d15f6019a4b3da1507b8b8970b954196723114185bef91336aeb226bb2f45ecd1
SSDEEP 192:J4NpWqhWVWEXCVWQ4cRWELl6AgfcMbnoQNpX01k9z3A12Yzw:J4XWqhWilll6/7R9zW2Ys
TLSH
T18BA219D39A685402FCDE6F7042E9E9537D3CA7E70D4091A609D6E94938D7384EB30A2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-util-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-core-util-l1-1-0.dll
Size 21KB
SHA256 eb41c514f2660813fa6ac58a28bcd2adfb64552b945dfcad5123f51a1a71f863
MD5 ed447c74d9047cbfcc66878b063d31be
SHA1 9efa4aaee23ed3135ed5dd8f64f0c267a7bf25e2
SHA512 cdaff5424a891c14a0b91174eff76f1e4d77018e2c74b378c0e9b08e3235bd964f0557e88f3f362336c054422e516470be5ef4bdf1f2a91319ecbcccf18c84f1
SSDEEP 192:vWqhW+WJWadJCsVWQ4mWp2fKUSIX01k9z3AEXztrD:vWqhW7CsP2IR9z5xrD
TLSH
T1D6A22BD286A8C043F99BEE7052E8DE473C3967C6196064D61AD4F59C2DD33C1EB24B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-conio-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-crt-conio-l1-1-0.dll
Size 21KB
SHA256 e7fc8d3956ce856b1ce0b8d16c10fa4c886a33717a64b818aa6d2492d7492429
MD5 ab1a23bf00ace7433c859205d518fa5c
SHA1 26fce2426649b769f5a029cde3c91eea70d5d5db
SHA512 999bd396ca2191d40bf2a1729b2a8876c0f62a7ec52768fc56070e22be18764bf8ada703ba1e6b2319e0fa4bf0f5cada24b2cdf6fb4881e95e432678858e3606
SSDEEP 192:AvMWqhW5WEXCVWQ4mWndwKUWX01k9z3ANO65R+0:DWqhW2R2R9z0O4+0
TLSH
T17FA2299396FC8A43F99B9A7062F9DBC36D3817C22950A0764999F45838C33D5FF2062D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-convert-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-crt-convert-l1-1-0.dll
Size 25KB
SHA256 4d80b38c49c9e507190b133e97c7b06ac926c5e1d93095bef8e35c51e7be4e3c
MD5 48ba542c275d6ace740b4aa548157473
SHA1 e207434272c4a2e66d0d0e5e634c96b31fc56d87
SHA512 a75df86ea70ea3b10ebf8193d07d7ad99d6b2bbb6fbae5dee39cf2e6cbb0b573adba633b67854b65f01a27d70d263a41d0f8190bea000155c2800a9d2ed37f74
SSDEEP 192:j89cy5WqhWKWEXCVWQ4mW1pbm28RwX01k9z3A9gYuPTc:jVy5WqhWdcbm29R9zkwPQ
TLSH
T174C2C68366E82E56F9DF177221FE8BD72A341782169053B4C743E54C3483792BDA7C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-environment-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-crt-environment-l1-1-0.dll
Size 21KB
SHA256 65eb6a1276426e0bffc0a7686770cae2fb15a0f819cab4b96003a292c483ec5d
MD5 859c13dfb783115ed36eb95037b7241e
SHA1 b26296f4faf33b9fa33eee171654eb378db5169c
SHA512 e419498101a73fd58f82d9f40112ec040455d78d34cb9025f37f5ffd1ff87c5b6fd97b7c1833b07821d8c0cce69cffb9124c7891ffce1c99deafa78b3ec544c6
SSDEEP 192:jWqhWXWEXCVWQ4mWPXTStcADB6ZX01k9z3AkpZKEYY7:jWqhWMKutcTR9zJp0Ez7
TLSH
T196A23B824BBC5103F9CB6D7052F8EA873C3867C75D40917A46E8F5482983391FB30A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-filesystem-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-crt-filesystem-l1-1-0.dll
Size 21KB
SHA256 61424c4c6cf665ef1c6e092a105721813d495ff17d81c809b505acf9ac0c575a
MD5 b83a1737d839d6106bb92d7d4b3dbed4
SHA1 894cd0b8edccd1c661e060b50761d95ef0cef51d
SHA512 fc44f9afeb553e261d7b0782897985eabd30522a6fdb558f958c53c0e8cb36f20251487853076a35e14212d4fb2b51d8bd246e2d69b8c1cc1c53ef7156bcad56
SSDEEP 192:epUEpnWlC0i5CBWqhWULeWEXCVWQ4mW+HcADB6ZX01k9z3Akpki8mq:eptnWm5CBWqhWmFcTR9zJpklmq
TLSH
T11DA2198352E87D02FD9B1FB211FDEBDB3E3927C209929266C096B41836D7380BF21559
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-heap-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-crt-heap-l1-1-0.dll
Size 21KB
SHA256 42fed4693a9f2ee8ebb29b34ac92aaef9ff070f609e0cbff74258f65ea53d666
MD5 d50203f25306427ccc9935ec45431b95
SHA1 2c00a5db17df3bdcf8f98814a6117b7beb312003
SHA512 a5a0d30bf14788921c16771a6f2f40702c3a1d3e912aa6854095bb74fe8c2d590edbbdef78ea8729b68776567581c156079ffa66f41d7e86d08c77c0d838c9d7
SSDEEP 192:Qvh8Y17aFBRsWqhWcqWJWadJCsVWQ4mWhePyttuX01k9z3A2b:+L5WqhWcHCsGSR9zfb
TLSH
T188A23BC386EC5143F997AF7057F4EA873C7A6BC26D40946A41DAF1982C433C0BB2162E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-locale-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-crt-locale-l1-1-0.dll
Size 21KB
SHA256 f2d099d580c733d3132ac3cd0179c7bfa0f1ed8f7bd063e411cd57e920510488
MD5 2ca6aecd962341ef2565ddc8fd5bc127
SHA1 b43bc1b2d06b489e5170fa72f25bbc21f295bb9d
SHA512 1a9b4338c1ebc99ce92e378b357cb65b4eb1dbb3cc40248d6e878694375b140d23fd80bc4e889aa3ddcd148752dcb460194bc55939b71053060de460310f8c04
SSDEEP 192:YUnWqhWRWJWadJCsVWQ4mW+2pyttuX01k9z3A2tnUXX:1WqhWQCsFSR9zfKX
TLSH
T120A22CC785BC9143F997AEB046F8EA476C397BC2190154AA05D6F5982C833CCBF25B1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-math-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-crt-math-l1-1-0.dll
Size 29KB
SHA256 8483828a6781dc3cc4a121e2a90f54abb6f6c42680a0634e02db8b736d16f877
MD5 4c344ba3ea55d42a089abee91273bae3
SHA1 eea467320026fe6b156f84e11dfb8fe5b6c43ca1
SHA512 2853b3134545820024aff7b753fef7029e998205d45c7c8c68112b86c6b38665f61611eb656d74fbf4197a8891d99711df1d85ca73c642f9f9f036207058191f
SSDEEP 384:o7yaFM4Oe59Ckb1hgmLVWqhW2CseNbZR9zQod9KM6:mFMq59Bb1jnsFT9zz/6
TLSH
T1E9D2F7474ADCFFA7D58F4BB701F08BCE69381AA294D1B6B4C84BA08835537C47E53A49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-process-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-crt-process-l1-1-0.dll
Size 21KB
SHA256 f426c73f187c4c3c6759514c11f752a1f8411a1f4392bbee984652e62d2e7296
MD5 4c64207eac5b781b2f28d3c98d86ddfb
SHA1 4ae21f73f005e41cf2fa15c53cd491d7f17797d8
SHA512 840574fa1685da739cb0f3b85a14c51716dbc878ff80f29936bb895fe682079d56160055bf2d99230fe3ff9b6134a85a8cab905e0f702f05f280ca5643fad950
SSDEEP 192:ueXrqjd7ZWqhWiWJWadJCsVWQ4mWkeqyttuX01k9z3A27y7x:u4rgWqhWfCsa7SR9zf7sx
TLSH
T12EA21BC796F85543EA679F3042F5D6837E3757D25C40907A85A6F18C3C43385BB3162A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-runtime-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-crt-runtime-l1-1-0.dll
Size 25KB
SHA256 21c3d46f74f4249c81d723373da639ac2fb2733a626ec11310df49874663d2bc
MD5 bb6023337b1f327d65bd07c13ced515e
SHA1 d8f5eac615afd860d43c2155d902d69bee35ec54
SHA512 f38cbad6ed641daf50df660499ff0ca7e2f86a06a4e486b5ceaea00a7d3ef4aa066032346d552a0824d9a7d90a2a12f87b0bb9b0d16e4b5cf28b7569beb66b27
SSDEEP 192:9mGqX8mPrpJhhf4AN5/KiFWqhW2WEXCVWQ4mW403jx6RMySX01k9z3Azaqz89qq:9ysyr77WqhWpkcMR9zqaCyqq
TLSH
T13FC2E8839AEC7F13E9CB6F7316F9D7C72E366382161095759993F0883593380BD2621A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-stdio-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-crt-stdio-l1-1-0.dll
Size 25KB
SHA256 e4a6bd5d65d39da4424ab7828959cfeb7c362e29008bc63ecf16fb3b20001807
MD5 c9103f6861fa14345cfb763189292cb4
SHA1 f3959ba76d98add1f7e502f01aa470efe7df24ee
SHA512 e14c23a8a1913b10598ee57381ba9d51880b1615c995a54d7dfb65af6bf22c4d2740225fe20ddfc0309d2dd043db2505b063644588608b4b7b32382082b2ab43
SSDEEP 192:IuV2OlkuWYFxEpahfWqhWcWEXCVWQ4mWtCfj8RwX01k9z3A9gYupeloAy:xV2oFVhfWqhWntfj9R9zkwFP
TLSH
T1F2C2E68391EC7F42E28B877319FAEBDA5B3147832504B579D543E88836CA388BE13559
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-string-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-crt-string-l1-1-0.dll
Size 25KB
SHA256 a1cf3656daa57afb840714f891e7f072ca56bf5838f525d4394c362ef5c8ed8f
MD5 98b05e06c6ab62d854307a18e38626c0
SHA1 9cb855b3bf21162105b7dc5e0f1789d70c6eb817
SHA512 0609427d7c752eeeb3f40d1d721f651404a42b21f7b27db74b637ea0ad5bf9eb47e1b68a5291827743d494265986f51d7f48532ac67b9afeebd766c5091b04c9
SSDEEP 768:RCV5yguNvZ5VQgx3SbwA71IkFG5sFT9zzN:W5yguNvZ5VQgx3SbwA71I9uTzp
TLSH
T1D9C2E64346F83F41DACF4BB359FA8BC72A344F8616406375D5A7A48C3842792BE77A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-time-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-crt-time-l1-1-0.dll
Size 21KB
SHA256 fc27f6061faf91d696a2b3685a3bfac4de49fbf78d578b9970e1ed21f683b209
MD5 76455596ccdd9b075d140fd82ae05790
SHA1 4772c9e36e8301bd32c4d4853d054b443bac2d65
SHA512 1055ae79c9138773d54b3aabf616b0cd4544da0c646c27b585174be510916d6c3e3ff9d70146a55810a4b189cea20855be4d7d9c0a90e16669455772fa5b88ef
SSDEEP 192:mE3hwDGWqhWiWEXCVWQ4cRWn+doKDUX01k9z3AQabCZ:BWqhW1lGpR9zzOC
TLSH
T1F0A2F94345E8AA47FADB5B7112F9DBDB3F3417C2168071768252A4883A87380FE2396D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-utility-l1-1-0.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\api-ms-win-crt-utility-l1-1-0.dll
Size 21KB
SHA256 788611c05ef16759ac57df231b25b413be33fccabbeb446caaf4b5cbedd8e1dc
MD5 c4101780e1a10227eadd8669c42601fa
SHA1 68b4142362b1fdf98ee2a74a7f48b5dcb3003f92
SHA512 73e44cac374e77913051edb5c9400afb466ed14140ac61ab29dd5a57b1b76c9eba01d945ccfb077a60d519392a42f6758ffc4829f5f053c236915b5cf7ada3cd
SSDEEP 192:V/fHQduDWqhWJWJWadJCsVWQ4mWxrEyttuX01k9z3A26W7:V/ftWqhWoCsmpSR9zf6W7
TLSH
T110A22C874AAC5642FA9B9F7053E8EB433C396BC25D0085A641E5F59C2C47780FF3162D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base_library.zip

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\base_library.zip
Size 859KB
SHA256 6fbaccfe9d4820d4ffaf12c1afc3dd3898476330fe176340bab46a60eb555510
MD5 5454e093eed32aa76c1c8fdf5fefb269
SHA1 da9cc026f5dc7954158ae61354124dd1d0100e53
SHA512 96eeb726909277743d845ce062d01ffc20e597f2895b61d22b96a4b5594fa4f8559282e83a16c006d50536f648fd9028674c02689061f2604b34300a5b83b2f5
SSDEEP 12288:XkVwxdygYJuoMNcQB6uBCdSWyDA4a2YVvwfpEi4Sr+cDk:UVwx4gYJbMN1fVDLa2dfpEa+ik
TLSH
T126153A8069911ED7FD05F278815F8E3C069AB33ADB89D583BA4FC2D8BF471E00995A5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffi.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\ffi.dll
Size 39KB
SHA256 eb22fc95044ce939910d41857445bd0ecc4fc4d810ba30cc6b5f7f55b48ac8ed
MD5 c19143d34230f69776ff22f1f2bf8483
SHA1 d0ea3cae088f86b3590f01dbe9578344dc6a327f
SHA512 d8061fd797d88198e5e4542c3dc184f4933de88890e6ea5594f33232166fa3c27525f71543398b407f76db2ee550961419b234c14bdeac1fba4413d343d9711f
SSDEEP 768:Xzd2RFoq8qsAMD3kZeOiJKp7ghA5YivKejAMxkE:Z2JsVL/OiQJghS7SeDx
TLSH
T18A038C07458418A4DA27D83E93628D2AC7357A351B80E2CB03E5C27B2F6B7D5EB7D354
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcrypto-3-x64.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\libcrypto-3-x64.dll
Size 5.1MB
SHA256 97ebc121e9478d09358acf8d8c68b465eaa99f8ee3cd515b3d440525b6a9ce90
MD5 80fb06b2141f577ddd385e0a6c86a911
SHA1 c413ea544f397174884f232fcc5a97a40dcbc2ce
SHA512 d6e999db2c69a50ac3c6ca70f890d965a16e76ebe6f4b7c6089fc508f4e5fc84c73fc039dbb83431e3fa72a1837d74d5b45c1897b877f89029baca3b32400376
SSDEEP 98304:ju+s7TXSSA9/5cXU4qJbVPG51CPwDvt3uFlDCsCp:yD7TXSv/5cXU4qJbV+51CPwDvt3uFlDs
TLSH
T18E367B2AA7A80189E4BAC13CC5974A23D2B1F81A577097CF15A1967D0F37FDA2B3D740
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

liblzma.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\liblzma.dll
Size 151KB
SHA256 fe7f795dbcd8a5e697abac01f3ce1f9a97fc9eab363adf60cb150bfc24b64c22
MD5 ba2621a644e6aa6efb8bafb56df9e715
SHA1 8ec9cea165a826e5c9b8a01bb08c1277f3ccfd9d
SHA512 2684136e9c36e7dee1a7122148c33f527257c5debad9a2a250a45e2ee13698a81c903dd29eb51eb5d16611b8fcf70d6d1c5a1cfd5c5e2fdf8501ec7e7d1ae71a
SSDEEP 3072:ftQ/DkRTd3NltAnlcu8bE/IXXIjHKl9mNoA3GDw6lKX:fh9lmlcE/IOqlYOA3GDw6l
TLSH
T1ABE3F699B294F5E1F226CC38C9638B27E2F57845030496DB12DC837D1A6FBE51A3A307
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libssl-3-x64.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\libssl-3-x64.dll
Size 771KB
SHA256 d6011e2c3ed87a37dbd7454ef84cd4679e79644a103b74087ca01eccf52c54a8
MD5 8b508378c127cc256ab3dc5fcc42b3b7
SHA1 5ad5001db150da06bd2a2d0aeece7e7ea68483ac
SHA512 db818cf950335b6e7b08e15bf89d96ae6d11a7e1126f411510880a2bb2455354a572e6fc142026aa5147b0a2a045001111b0eb31efc131b5d11958bc568960cc
SSDEEP 12288:ZU18BdIqk4s0jjnsFRf+5mYlWO9eFe9XbT:iCBdIqfsEjn2fQlGFe9XbT
TLSH
T120F44B9DB3B8059DE9F6D13D86534623E3B6F4152370EBDB06518A790F23BD42A3A348
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pyexpat.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\pyexpat.pyd
Size 184KB
SHA256 92ca758f10cc248e0b4c5a26e37f3dbc16ebe2ef73d78e5af924842454cedcc0
MD5 05a378e5a82e325290cbe3131632bbeb
SHA1 87972db4394c81f6e930d504fd622389f94391f4
SHA512 fd3b49b93773aca48136d11dd3c559e1331940486050694993ac44d0ed4489434286be835cc06a95573c5144301f5623fc8da07309dd83fba2c3ea195058b1c5
SSDEEP 3072:b+3AK/RA8O/4Dn/ZUiaWs8qmwHi3hIrsRxAM8uDaYiEc+bWu66WKWpjbT21zILLO:b2/K8zr7/YmwHQqr1WjTWuyO1
TLSH
T174043A5772E5C2EBD993803CCA534616D77274A50351A7CF26A0EBBC1F23BC52A7A360
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python310.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\python310.dll
Size 4.8MB
SHA256 65d222582ebbfd54342625cc3526307fd051cbcff50e56624845c735ccaf992e
MD5 2e6632a0a7530850926b0fff818c5597
SHA1 e8f5ea20619f6dd0eb39c94471105f376e19180a
SHA512 cc3974df27b6f6db8e4872e87de83e476fbc77980ba36329474446da021ec4ed70c1852e7a199e505a0aa21ab010abd8af803dc3fc24c2b8d6a9eba31a49bb4d
SSDEEP 49152:I+wA4NNDu9DH0gRqiGsxv4sxyAPwFx9QYcQ/rs/jzTwbQV/HT76Y6S2I0F8HBvMu:6DNWlE+hQ/rs/fV6u0uHFMmarFq+l
TLSH
T10B365A66929410A4D9B2C6799D57924ADBF1BC003B21D7DB00A4FADD2F33BE706FE205
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

select.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\select.pyd
Size 18KB
SHA256 1f28fc96d38af9bb517ad4a066adfb01cb2fd2454aa8b699fad020db249d2e8a
MD5 ebb40b5f09dc973a5f354207b89efd3a
SHA1 8a9503f9ad62159b8cca684f30ee60d69bc14d82
SHA512 9f4088e7f5568545a259b35abb7241db9d464cfc6f19d4f57803f3a849e1b7b6dc08b62fa9e7018119eecb2ddf9659be0b375746b8a1f8d8821cc6da13301fb3
SSDEEP 384:0HZZntSVsoR5/1N1rb9HqUJcBsXhj0xa0sj2ILQG:Etcl1rb9Hq2c6V0I2ILQG
TLSH
T17D824B02FB6454A2D1A681B28CB76F05D575F576036583CF22A8C3AC1F337C26E36B52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ucrtbase.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\ucrtbase.dll
Size 1.1MB
SHA256 91d027417ff2301b7135e864a5df6693488f8412ff87040f4897e0e03bc2577b
MD5 6a44a2235d33b3f154fc50dc72e8ea61
SHA1 e98127a010bc6555e50e2ce7eba6ead8d8e13bf3
SHA512 057595ef00dc41aab49d654dc1b8dfdfaad58a3e2cf764db71090413b04e07c618d4592b390d170a4fbbc02f04c68f11b382258e3bf13a1791c6bfc97df7687b
SSDEEP 24576:LJG1Gxpl9A7ieKvAQ8dDtLV8+CaC6EOx7c0zwRmxvSZX0ypTRHJ:0uP1wdhq+CaPHxV+f
TLSH
T1D8359E28B75C02AAD97BE17CC923550AF973380547709ACB03A74BB93E277E916B7311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

unicodedata.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI35602\unicodedata.pyd
Size 1.1MB
SHA256 af13b4a21d1ced22e1a945823c46d68ae0a84448d10ee9786e4920095a7614ee
MD5 3cb707f226873f4eda399372d9d80e45
SHA1 420552884356ed16772efc7d94c714c57bc71074
SHA512 7ab2dd88f4090604867366ffc873a2ecb29d7b0c9fdc35cf3fe4f582f7cccdc030e1d0bf7465e6e1f0b4705f84817b772728c2060d6d59a9c070e5139e5f3a13
SSDEEP 12288:BqqQCb5Pfhnzr0qlIL8k4MmuZ63NeM7IRG5eeIje6VZyrIBHdQLhfFE+i7:BqsZV0mIwuJMMREtIi6Vo4uc7
TLSH
T12C355909BAC24EE2E89B067940D3117B2F61C1720F0B6B4F76A5532D9C763A74EE653C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads