e972730be6842b581b245cc91d5461f11f9f7aaeef7757fa4b1d85d4ede83e73

Analysis

max time kernel
1s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 05:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm.exe
Size 1.1MB
Sample260804-ftshvs1hph
SHA256 e972730be6842b581b245cc91d5461f11f9f7aaeef7757fa4b1d85d4ede83e73
MD5 e023171329c49dd9aceeda38f20def8f
SHA1 6e78e9e8c5dd286efad41d63eff552ef807fb7cb
SHA512 c6e06a167261b07dcb5b106be2a24fc72c4e8a7c9d1e6177449fe38cd36efb377cf9980b50aa81be3160735dfd6de3dcc99ba9d3db91298c7c9adae928bc4b3c
SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msuY7s2YCDi50NiQDuysMFZzN/E/msuY7s3a0wIk0C:693geg93gewafDd70iTWCv
TLSH
T11645AE11F78044B9F4A785758AAB87159A39BC9A1F71DACF53C8032A1F727F08E38716
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

discovery persistence

Malware Config

Signatures

Detects Windows executables referencing non-Windows User-Agents 4 IoCs

resource	yara_rule
behavioral1/files/0x0007000000024590-3.dat	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA
behavioral1/files/0x0007000000024593-10.dat	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA
behavioral1/files/0x0007000000024592-18.dat	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA
behavioral1/memory/4736-19-0x0000000000800000-0x0000000000816000-memory.dmp	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Executes dropped EXE 26 IoCs

pid	Process
4736	audiodg.exe
5116	shost.exe
4456	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm..exe
4276	audiodg.exe
4316	audiodg.exe
4168	shost.exe
3140	shost.exe
4132	audiodg.exe
4216	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm...exe
1528	audiodg.exe
956	shost.exe
940	shost.exe
4368	audiodg.exe
2600	audiodg.exe
4804	shost.exe
3264	audiodg.exe
4860	shost.exe
2480	audiodg.exe
4336	shost.exe
744	audiodg.exe
4608	shost.exe
2044	shost.exe
3196	audiodg.exe
4628	audiodg.exe
3456	shost.exe
4556	shost.exe

Modifies system executable filetype association 2 TTPs 36 IoCs

persistence

Modify Registry

T1112

Change Default File Association

T1546.001

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm..exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm..exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm..exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm...exe

Modifies registry class 36 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm..exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	shost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command	shost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm..exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "C:\\Users\\Admin\\Documents\\diagnostics\\shost.exe \"%1\" %*"	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm..exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4216	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm...exe
4216	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm...exe
4216	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm...exe
4216	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm...exe
4216	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm...exe
4216	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm...exe
4216	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm...exe
4216	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm...exe
4216	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm...exe
4216	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm...exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 2684 wrote to memory of 4736	2684	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm.exe	496
PID 2684 wrote to memory of 5116	2684	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm.exe	89
PID 2684 wrote to memory of 4456	2684	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm.exe	90
PID 5116 wrote to memory of 4276	5116	shost.exe	597
PID 4456 wrote to memory of 4316	4456	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm..exe	1927
PID 5116 wrote to memory of 4168	5116	shost.exe	93
PID 4456 wrote to memory of 3140	4456	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm..exe	94
PID 4168 wrote to memory of 4132	4168	shost.exe	714
PID 4456 wrote to memory of 4216	4456	2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm..exe	96
PID 3140 wrote to memory of 1528	3140	shost.exe	794
PID 4168 wrote to memory of 956	4168	shost.exe	99
PID 3140 wrote to memory of 940	3140	shost.exe	100
PID 956 wrote to memory of 4368	956	shost.exe	518
PID 940 wrote to memory of 2600	940	shost.exe	1250
PID 956 wrote to memory of 4804	956	shost.exe	108
PID 4804 wrote to memory of 3264	4804	shost.exe	817
PID 940 wrote to memory of 4860	940	shost.exe	112
PID 4860 wrote to memory of 2480	4860	shost.exe	741
PID 4804 wrote to memory of 4336	4804	shost.exe	115
PID 4336 wrote to memory of 744	4336	shost.exe	1160
PID 4860 wrote to memory of 4608	4860	shost.exe	121
PID 4336 wrote to memory of 2044	4336	shost.exe	122
PID 2044 wrote to memory of 3196	2044	shost.exe	175
PID 4608 wrote to memory of 4628	4608	shost.exe	1612
PID 2044 wrote to memory of 3456	2044	shost.exe	127
PID 4608 wrote to memory of 4556	4608	shost.exe	128

C:\Users\Admin\AppData\Local\Temp\2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm.exe"
1⤵
- Modifies system executable filetype association
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:2684
- C:\Users\Admin\Documents\diagnostics\audiodg.exe
  "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
  2⤵
  - Executes dropped EXE
  PID:4736
- C:\Users\Admin\Documents\diagnostics\shost.exe
  "C:\Users\Admin\Documents\diagnostics\shost.exe"
  2⤵
  - Executes dropped EXE
  - Modifies system executable filetype association
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:5116
- - C:\Users\Admin\Documents\diagnostics\audiodg.exe
    "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
    3⤵
    - Executes dropped EXE
    PID:4276
- - C:\Users\Admin\Documents\diagnostics\shost.exe
    "C:\Users\Admin\Documents\diagnostics\shost.exe"
    3⤵
    - Executes dropped EXE
    - Modifies system executable filetype association
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:4168
  - - C:\Users\Admin\Documents\diagnostics\audiodg.exe
      "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
      4⤵
      Executes dropped EXE
      PID:4132
  - - C:\Users\Admin\Documents\diagnostics\shost.exe
      "C:\Users\Admin\Documents\diagnostics\shost.exe"
      4⤵
      Executes dropped EXE
      Modifies system executable filetype association
      Modifies registry class
      Suspicious use of WriteProcessMemory
      PID:956
    - - C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        5⤵
        Executes dropped EXE
        
        PID:4368
    - - C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        5⤵
        Executes dropped EXE
        Modifies system executable filetype association
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:4804
      - C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        6⤵
        Executes dropped EXE
        
        PID:3264
      - C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        6⤵
        Executes dropped EXE
        Modifies system executable filetype association
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:4336
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        7⤵
        Executes dropped EXE
        
        PID:744
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        7⤵
        Executes dropped EXE
        Modifies system executable filetype association
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:2044
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        8⤵
        Executes dropped EXE
        
        PID:3196
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        8⤵
        Executes dropped EXE
        
        PID:3456
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        9⤵
        
        PID:992
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        9⤵
        
        PID:2396
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        10⤵
        
        PID:3024
        
        C:\Windows\system32\WerFault.exe
        
        C:\Windows\system32\WerFault.exe -u -p 3024 -s 684
        11⤵
        
        PID:3196
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        10⤵
        
        PID:1540
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        11⤵
        
        PID:5000
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        11⤵
        
        PID:1976
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        12⤵
        
        PID:3380
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        12⤵
        
        PID:1124
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        13⤵
        
        PID:3288
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        13⤵
        
        PID:1504
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        14⤵
        
        PID:3864
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        14⤵
        
        PID:4040
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        15⤵
        
        PID:2320
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        15⤵
        
        PID:4928
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        16⤵
        
        PID:5112
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        16⤵
        
        PID:3224
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        17⤵
        
        PID:3512
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        17⤵
        
        PID:3692
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        18⤵
        
        PID:744
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        18⤵
        
        PID:4764
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        19⤵
        
        PID:3080
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        19⤵
        
        PID:3668
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        20⤵
        
        PID:536
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        20⤵
        
        PID:3348
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        21⤵
        
        PID:3824
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        21⤵
        
        PID:3464
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        22⤵
        
        PID:4196
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        22⤵
        
        PID:4100
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        23⤵
        
        PID:4068
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        23⤵
        
        PID:3116
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        24⤵
        
        PID:4376
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        24⤵
        
        PID:4140
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        25⤵
        
        PID:1040
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        25⤵
        
        PID:3792
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        26⤵
        
        PID:5000
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        26⤵
        
        PID:4176
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        27⤵
        
        PID:3080
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        27⤵
        
        PID:2244
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        28⤵
        
        PID:2624
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        28⤵
        
        PID:1652
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        29⤵
        
        PID:4736
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        29⤵
        
        PID:212
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        30⤵
        
        PID:3480
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        30⤵
        
        PID:3452
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        31⤵
        
        PID:4656
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        31⤵
        
        PID:2120
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        32⤵
        
        PID:4364
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        32⤵
        
        PID:1152
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        33⤵
        
        PID:3712
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        33⤵
        
        PID:4432
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        34⤵
        
        PID:5028
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        34⤵
        
        PID:2604
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        35⤵
        
        PID:3672
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        35⤵
        
        PID:4200
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        36⤵
        
        PID:3948
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        36⤵
        
        PID:4444
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        37⤵
        
        PID:3148
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        37⤵
        
        PID:3448
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        38⤵
        
        PID:4948
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        38⤵
        
        PID:1592
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        39⤵
        
        PID:3016
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        39⤵
        
        PID:896
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        40⤵
        
        PID:4896
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        40⤵
        
        PID:4776
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        41⤵
        
        PID:3404
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        41⤵
        
        PID:4524
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        42⤵
        
        PID:2876
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        42⤵
        
        PID:3368
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        43⤵
        
        PID:5032
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        43⤵
        
        PID:4752
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        44⤵
        
        PID:4536
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        44⤵
        
        PID:3812
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        45⤵
        
        PID:4816
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        45⤵
        
        PID:228
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        46⤵
        
        PID:3112
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        46⤵
        
        PID:1980
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        47⤵
        
        PID:4792
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        47⤵
        
        PID:5044
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        48⤵
        
        PID:3088
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        48⤵
        
        PID:4660
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        49⤵
        
        PID:2672
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        49⤵
        
        PID:2568
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        50⤵
        
        PID:4128
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        50⤵
        
        PID:3512
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        51⤵
        
        PID:4364
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        51⤵
        
        PID:3320
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        52⤵
        
        PID:4820
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        52⤵
        
        PID:4616
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        53⤵
        
        PID:1444
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        53⤵
        
        PID:704
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        54⤵
        
        PID:1288
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        54⤵
        
        PID:208
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        55⤵
        
        PID:2204
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        55⤵
        
        PID:4212
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        56⤵
        
        PID:800
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        56⤵
        
        PID:3404
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        57⤵
        
        PID:3876
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        57⤵
        
        PID:4276
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        58⤵
        
        PID:3776
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        58⤵
        
        PID:4824
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        59⤵
        
        PID:5032
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        59⤵
        
        PID:4248
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        60⤵
        
        PID:3684
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        60⤵
        
        PID:972
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        61⤵
        
        PID:1404
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        61⤵
        
        PID:3536
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        62⤵
        
        PID:2876
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        62⤵
        
        PID:4936
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        63⤵
        
        PID:4420
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        63⤵
        
        PID:2420
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        64⤵
        
        PID:2252
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        64⤵
        
        PID:4664
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        65⤵
        
        PID:2416
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        65⤵
        
        PID:1220
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        66⤵
        
        PID:1800
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        66⤵
        
        PID:3392
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        67⤵
        
        PID:2280
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        67⤵
        
        PID:4908
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        68⤵
        
        PID:4600
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        68⤵
        
        PID:604
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        69⤵
        
        PID:2756
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        69⤵
        
        PID:5012
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        70⤵
        
        PID:4128
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        70⤵
        
        PID:2148
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        71⤵
        
        PID:4392
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        71⤵
        
        PID:3492
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        72⤵
        
        PID:4340
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        72⤵
        
        PID:1624
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        73⤵
        
        PID:4144
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        73⤵
        
        PID:5040
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        74⤵
        
        PID:1616
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        74⤵
        
        PID:4072
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        75⤵
        
        PID:824
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        75⤵
        
        PID:4652
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        76⤵
        
        PID:3872
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        76⤵
        
        PID:5096
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        77⤵
        
        PID:3468
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        77⤵
        
        PID:1528
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        78⤵
        
        PID:3916
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        78⤵
        
        PID:2068
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        79⤵
        
        PID:3112
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        79⤵
        
        PID:4224
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        80⤵
        
        PID:4408
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        80⤵
        
        PID:3968
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        81⤵
        
        PID:2876
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        81⤵
        
        PID:1404
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        82⤵
        
        PID:1800
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        82⤵
        
        PID:2980
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        83⤵
        
        PID:1104
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        83⤵
        
        PID:1040
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        84⤵
        
        PID:2416
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        84⤵
        
        PID:4536
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        85⤵
        
        PID:888
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        85⤵
        
        PID:2300
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        86⤵
        
        PID:4784
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        86⤵
        
        PID:1216
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        87⤵
        
        PID:4260
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        87⤵
        
        PID:2212
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        88⤵
        
        PID:1772
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        88⤵
        
        PID:3684
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        89⤵
        
        PID:1576
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        89⤵
        
        PID:1444
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        90⤵
        
        PID:4796
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        90⤵
        
        PID:3752
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        91⤵
        
        PID:1344
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        91⤵
        
        PID:4372
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        92⤵
        
        PID:3040
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        92⤵
        
        PID:3480
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        93⤵
        
        PID:2756
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        93⤵
        
        PID:5260
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        94⤵
        
        PID:5316
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        94⤵
        
        PID:5420
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        95⤵
        
        PID:5476
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        95⤵
        
        PID:5580
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        96⤵
        
        PID:5644
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        96⤵
        
        PID:5792
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        97⤵
        
        PID:5868
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        97⤵
        
        PID:5972
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        98⤵
        
        PID:6032
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        98⤵
        
        PID:1532
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        99⤵
        
        PID:2876
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        99⤵
        
        PID:800
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        100⤵
        
        PID:5092
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        100⤵
        
        PID:2372
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        101⤵
        
        PID:5504
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        101⤵
        
        PID:5032
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        102⤵
        
        PID:5132
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        102⤵
        
        PID:5780
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        103⤵
        
        PID:5816
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        103⤵
        
        PID:5252
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        104⤵
        
        PID:6056
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        104⤵
        
        PID:5640
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        105⤵
        
        PID:2804
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        105⤵
        
        PID:5912
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        106⤵
        
        PID:6104
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        106⤵
        
        PID:5164
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        107⤵
        
        PID:1344
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        107⤵
        
        PID:5540
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        108⤵
        
        PID:5236
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        108⤵
        
        PID:5876
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        109⤵
        
        PID:4532
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        109⤵
        
        PID:5724
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        110⤵
        
        PID:832
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        110⤵
        
        PID:5304
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        111⤵
        
        PID:4684
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        111⤵
        
        PID:5152
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        112⤵
        
        PID:2924
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        112⤵
        
        PID:4436
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        113⤵
        
        PID:1848
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        113⤵
        
        PID:5228
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        114⤵
        
        PID:5948
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        114⤵
        
        PID:5712
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        115⤵
        
        PID:5664
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        115⤵
        
        PID:5136
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        116⤵
        
        PID:5332
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        116⤵
        
        PID:5016
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        117⤵
        
        PID:5220
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        117⤵
        
        PID:4128
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        118⤵
        
        PID:6000
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        118⤵
        
        PID:2804
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        119⤵
        
        PID:4124
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        119⤵
        
        PID:3308
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        120⤵
        
        PID:5248
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        120⤵
        
        PID:6008
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        121⤵
        
        PID:6136
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        121⤵
        
        PID:5408
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        122⤵
        
        PID:5836
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        122⤵
        
        PID:5240
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        123⤵
        
        PID:3776
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        123⤵
        
        PID:5648
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        124⤵
        
        PID:6076
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        124⤵
        
        PID:2600
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        125⤵
        
        PID:5440
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        125⤵
        
        PID:4424
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        126⤵
        
        PID:3572
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        126⤵
        
        PID:4256
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        127⤵
        
        PID:2944
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        127⤵
        
        PID:1508
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        128⤵
        
        PID:6088
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        128⤵
        
        PID:5492
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        129⤵
        
        PID:664
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        129⤵
        
        PID:6012
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        130⤵
        
        PID:2472
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        130⤵
        
        PID:5964
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        131⤵
        
        PID:6064
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        131⤵
        
        PID:5500
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        132⤵
        
        PID:5184
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        132⤵
        
        PID:5660
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        133⤵
        
        PID:4076
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        133⤵
        
        PID:5172
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        134⤵
        
        PID:5388
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        134⤵
        
        PID:3428
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        135⤵
        
        PID:3508
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        135⤵
        
        PID:5244
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        136⤵
        
        PID:5644
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        136⤵
        
        PID:4232
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        137⤵
        
        PID:2152
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        137⤵
        
        PID:5804
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        138⤵
        
        PID:5512
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        138⤵
        
        PID:6052
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        139⤵
        
        PID:4600
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        139⤵
        
        PID:5168
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        140⤵
        
        PID:2784
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        140⤵
        
        PID:6024
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        141⤵
        
        PID:5212
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        141⤵
        
        PID:928
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        142⤵
        
        PID:5440
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        142⤵
        
        PID:4260
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        143⤵
        
        PID:5844
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        143⤵
        
        PID:5604
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        144⤵
        
        PID:5768
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        144⤵
        
        PID:5340
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        145⤵
        
        PID:5716
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        145⤵
        
        PID:5544
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        146⤵
        
        PID:5196
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        146⤵
        
        PID:5388
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        147⤵
        
        PID:5772
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        147⤵
        
        PID:5092
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        148⤵
        
        PID:6016
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        148⤵
        
        PID:824
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        149⤵
        
        PID:3776
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        149⤵
        
        PID:5520
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        150⤵
        
        PID:5524
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        150⤵
        
        PID:3712
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        151⤵
        
        PID:5396
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        151⤵
        
        PID:5716
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        152⤵
        
        PID:5824
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        152⤵
        
        PID:532
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        153⤵
        
        PID:4540
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        153⤵
        
        PID:5748
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        154⤵
        
        PID:4008
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        154⤵
        
        PID:5732
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        155⤵
        
        PID:5768
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        155⤵
        
        PID:5104
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        156⤵
        
        PID:5156
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        156⤵
        
        PID:3488
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        157⤵
        
        PID:6040
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        157⤵
        
        PID:5444
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        158⤵
        
        PID:5356
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        158⤵
        
        PID:5864
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        159⤵
        
        PID:5436
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        159⤵
        
        PID:4896
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        160⤵
        
        PID:5772
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        160⤵
        
        PID:4540
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        161⤵
        
        PID:5612
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        161⤵
        
        PID:5328
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        162⤵
        
        PID:6140
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        162⤵
        
        PID:5916
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        163⤵
        
        PID:5232
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        163⤵
        
        PID:2472
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        164⤵
        
        PID:6016
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        164⤵
        
        PID:5512
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        165⤵
        
        PID:2152
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        165⤵
        
        PID:4508
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        166⤵
        
        PID:5628
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        166⤵
        
        PID:6116
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        167⤵
        
        PID:4008
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        167⤵
        
        PID:5720
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        168⤵
        
        PID:5768
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        168⤵
        
        PID:5212
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        169⤵
        
        PID:4316
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        169⤵
        
        PID:872
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        170⤵
        
        PID:1804
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        170⤵
        
        PID:1800
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        171⤵
        
        PID:5200
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        171⤵
        
        PID:5616
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        172⤵
        
        PID:6120
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        172⤵
        
        PID:6000
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        173⤵
        
        PID:6108
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        173⤵
        
        PID:6192
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        174⤵
        
        PID:6248
- C:\Users\Admin\AppData\Local\Temp\2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm..exe
  "C:\Users\Admin\AppData\Local\Temp\2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm..exe"
  2⤵
  - Executes dropped EXE
  - Modifies system executable filetype association
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:4456
- - C:\Users\Admin\Documents\diagnostics\audiodg.exe
    "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
    3⤵
    - Executes dropped EXE
    PID:4316
- - C:\Users\Admin\Documents\diagnostics\shost.exe
    "C:\Users\Admin\Documents\diagnostics\shost.exe"
    3⤵
    - Executes dropped EXE
    - Modifies system executable filetype association
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:3140
  - - C:\Users\Admin\Documents\diagnostics\audiodg.exe
      "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
      4⤵
      Executes dropped EXE
      PID:1528
  - - C:\Users\Admin\Documents\diagnostics\shost.exe
      "C:\Users\Admin\Documents\diagnostics\shost.exe"
      4⤵
      Executes dropped EXE
      Modifies system executable filetype association
      Modifies registry class
      Suspicious use of WriteProcessMemory
      PID:940
    - - C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        5⤵
        Executes dropped EXE
        
        PID:2600
    - - C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        5⤵
        Executes dropped EXE
        Modifies system executable filetype association
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:4860
      - C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        6⤵
        Executes dropped EXE
        
        PID:2480
      - C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        6⤵
        Executes dropped EXE
        Modifies system executable filetype association
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:4608
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        7⤵
        Executes dropped EXE
        
        PID:4628
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        7⤵
        Executes dropped EXE
        
        PID:4556
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        8⤵
        
        PID:1764
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        8⤵
        
        PID:544
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        9⤵
        
        PID:5108
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        9⤵
        
        PID:1984
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        10⤵
        
        PID:5096
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        10⤵
        
        PID:3136
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        11⤵
        
        PID:4924
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        11⤵
        
        PID:1224
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        12⤵
        
        PID:212
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        12⤵
        
        PID:2728
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        13⤵
        
        PID:4600
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        13⤵
        
        PID:4712
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        14⤵
        
        PID:1864
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        14⤵
        
        PID:5020
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        15⤵
        
        PID:1528
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        15⤵
        
        PID:4692
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        16⤵
        
        PID:4272
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        16⤵
        
        PID:4428
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        17⤵
        
        PID:3544
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        17⤵
        
        PID:5108
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        18⤵
        
        PID:3404
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        18⤵
        
        PID:456
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        19⤵
        
        PID:1216
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        19⤵
        
        PID:2996
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        20⤵
        
        PID:3736
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        20⤵
        
        PID:4116
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        21⤵
        
        PID:1804
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        21⤵
        
        PID:2332
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        22⤵
        
        PID:1532
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        22⤵
        
        PID:2700
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        23⤵
        
        PID:1444
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        23⤵
        
        PID:5056
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        24⤵
        
        PID:2340
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        24⤵
        
        PID:748
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        25⤵
        
        PID:4164
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        25⤵
        
        PID:1548
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        26⤵
        
        PID:2676
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        26⤵
        
        PID:756
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        27⤵
        
        PID:4472
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        27⤵
        
        PID:3496
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        28⤵
        
        PID:228
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        28⤵
        
        PID:640
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        29⤵
        
        PID:4316
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        29⤵
        
        PID:3956
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        30⤵
        
        PID:3404
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        30⤵
        
        PID:4624
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        31⤵
        
        PID:4460
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        31⤵
        
        PID:4864
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        32⤵
        
        PID:4416
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        32⤵
        
        PID:2696
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        33⤵
        
        PID:740
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        33⤵
        
        PID:3360
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        34⤵
        
        PID:5088
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        34⤵
        
        PID:3736
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        35⤵
        
        PID:1228
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        35⤵
        
        PID:1864
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        36⤵
        
        PID:5032
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        36⤵
        
        PID:4888
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        37⤵
        
        PID:1116
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        37⤵
        
        PID:2268
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        38⤵
        
        PID:3488
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        38⤵
        
        PID:4640
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        39⤵
        
        PID:416
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        39⤵
        
        PID:1132
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        40⤵
        
        PID:5012
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        40⤵
        
        PID:4440
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        41⤵
        
        PID:2136
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        41⤵
        
        PID:2476
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        42⤵
        
        PID:3264
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        42⤵
        
        PID:4732
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        43⤵
        
        PID:552
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        43⤵
        
        PID:8
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        44⤵
        
        PID:5016
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        44⤵
        
        PID:4564
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        45⤵
        
        PID:1896
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        45⤵
        
        PID:1372
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        46⤵
        
        PID:5092
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        46⤵
        
        PID:2368
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        47⤵
        
        PID:2624
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        47⤵
        
        PID:4272
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        48⤵
        
        PID:4196
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        48⤵
        
        PID:3380
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        49⤵
        
        PID:2824
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        49⤵
        
        PID:4812
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        50⤵
        
        PID:1880
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        50⤵
        
        PID:552
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        51⤵
        
        PID:4136
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        51⤵
        
        PID:3168
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        52⤵
        
        PID:3032
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        52⤵
        
        PID:4052
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        53⤵
        
        PID:5068
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        53⤵
        
        PID:3672
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        54⤵
        
        PID:3552
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        54⤵
        
        PID:4744
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        55⤵
        
        PID:536
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        55⤵
        
        PID:3260
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        56⤵
        
        PID:876
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        56⤵
        
        PID:3336
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        57⤵
        
        PID:3052
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        57⤵
        
        PID:4112
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        58⤵
        
        PID:4124
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        58⤵
        
        PID:4296
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        59⤵
        
        PID:4264
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        59⤵
        
        PID:5008
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        60⤵
        
        PID:4520
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        60⤵
        
        PID:1048
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        61⤵
        
        PID:2136
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        61⤵
        
        PID:4064
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        62⤵
        
        PID:796
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        62⤵
        
        PID:2896
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        63⤵
        
        PID:4896
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        63⤵
        
        PID:2288
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        64⤵
        
        PID:3916
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        64⤵
        
        PID:2956
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        65⤵
        
        PID:4144
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        65⤵
        
        PID:1400
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        66⤵
        
        PID:2372
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        66⤵
        
        PID:1668
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        67⤵
        
        PID:3948
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        67⤵
        
        PID:4760
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        68⤵
        
        PID:4364
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        68⤵
        
        PID:4380
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        69⤵
        
        PID:4868
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        69⤵
        
        PID:4132
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        70⤵
        
        PID:4196
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        70⤵
        
        PID:740
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        71⤵
        
        PID:3012
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        71⤵
        
        PID:1168
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        72⤵
        
        PID:2152
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        72⤵
        
        PID:2480
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        73⤵
        
        PID:204
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        73⤵
        
        PID:3016
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        74⤵
        
        PID:928
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        74⤵
        
        PID:5028
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        75⤵
        
        PID:2192
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        75⤵
        
        PID:4716
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        76⤵
        
        PID:3308
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        76⤵
        
        PID:1084
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        77⤵
        
        PID:4436
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        77⤵
        
        PID:4724
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        78⤵
        
        PID:888
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        78⤵
        
        PID:1764
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        79⤵
        
        PID:1228
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        79⤵
        
        PID:3264
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        80⤵
        
        PID:4124
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        80⤵
        
        PID:3876
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        81⤵
        
        PID:4196
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        81⤵
        
        PID:1660
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        82⤵
        
        PID:4748
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        82⤵
        
        PID:2624
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        83⤵
        
        PID:4348
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        83⤵
        
        PID:4264
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        84⤵
        
        PID:1804
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        84⤵
        
        PID:3088
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        85⤵
        
        PID:1232
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        85⤵
        
        PID:4868
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        86⤵
        
        PID:652
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        86⤵
        
        PID:3080
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        87⤵
        
        PID:1172
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        87⤵
        
        PID:3708
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        88⤵
        
        PID:2824
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        88⤵
        
        PID:3284
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        89⤵
        
        PID:688
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        89⤵
        
        PID:3844
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        90⤵
        
        PID:5088
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        90⤵
        
        PID:2192
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        91⤵
        
        PID:2972
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        91⤵
        
        PID:116
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        92⤵
        
        PID:824
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        92⤵
        
        PID:632
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        93⤵
        
        PID:3712
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        93⤵
        
        PID:5204
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        94⤵
        
        PID:5280
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        94⤵
        
        PID:5412
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        95⤵
        
        PID:5468
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        95⤵
        
        PID:5568
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        96⤵
        
        PID:5628
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        96⤵
        
        PID:5784
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        97⤵
        
        PID:5836
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        97⤵
        
        PID:5940
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        98⤵
        
        PID:6044
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        98⤵
        
        PID:4408
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        99⤵
        
        PID:1608
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        99⤵
        
        PID:2972
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        100⤵
        
        PID:928
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        100⤵
        
        PID:2740
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        101⤵
        
        PID:5016
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        101⤵
        
        PID:5488
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        102⤵
        
        PID:5184
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        102⤵
        
        PID:5280
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        103⤵
        
        PID:5864
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        103⤵
        
        PID:5832
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        104⤵
        
        PID:5980
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        104⤵
        
        PID:5996
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        105⤵
        
        PID:5628
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        105⤵
        
        PID:1560
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        106⤵
        
        PID:6112
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        106⤵
        
        PID:5428
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        107⤵
        
        PID:1608
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        107⤵
        
        PID:5036
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        108⤵
        
        PID:1364
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        108⤵
        
        PID:3132
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        109⤵
        
        PID:5884
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        109⤵
        
        PID:5452
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        110⤵
        
        PID:5904
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        110⤵
        
        PID:6028
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        111⤵
        
        PID:4124
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        111⤵
        
        PID:3468
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        112⤵
        
        PID:5436
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        112⤵
        
        PID:6056
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        113⤵
        
        PID:2204
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        113⤵
        
        PID:1944
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        114⤵
        
        PID:5768
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        114⤵
        
        PID:4876
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        115⤵
        
        PID:5892
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        115⤵
        
        PID:6128
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        116⤵
        
        PID:5576
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        116⤵
        
        PID:5384
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        117⤵
        
        PID:5944
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        117⤵
        
        PID:5976
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        118⤵
        
        PID:6040
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        118⤵
        
        PID:5692
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        119⤵
        
        PID:5864
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        119⤵
        
        PID:2924
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        120⤵
        
        PID:5388
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        120⤵
        
        PID:4416
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        121⤵
        
        PID:5132
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        121⤵
        
        PID:5796
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        122⤵
        
        PID:5908
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        122⤵
        
        PID:4532
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        123⤵
        
        PID:5612
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        123⤵
        
        PID:3720
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        124⤵
        
        PID:3712
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        124⤵
        
        PID:5680
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        125⤵
        
        PID:5988
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        125⤵
        
        PID:6104
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        126⤵
        
        PID:5328
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        126⤵
        
        PID:868
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        127⤵
        
        PID:5264
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        127⤵
        
        PID:5992
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        128⤵
        
        PID:5756
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        128⤵
        
        PID:5668
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        129⤵
        
        PID:5144
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        129⤵
        
        PID:5348
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        130⤵
        
        PID:5840
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        130⤵
        
        PID:5552
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        131⤵
        
        PID:5628
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        131⤵
        
        PID:1608
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        132⤵
        
        PID:6068
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        132⤵
        
        PID:5932
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        133⤵
        
        PID:5224
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        133⤵
        
        PID:5392
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        134⤵
        
        PID:4736
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        134⤵
        
        PID:5956
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        135⤵
        
        PID:3916
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        135⤵
        
        PID:3040
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        136⤵
        
        PID:5372
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        136⤵
        
        PID:5808
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        137⤵
        
        PID:5232
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        137⤵
        
        PID:5564
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        138⤵
        
        PID:5256
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        138⤵
        
        PID:5284
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        139⤵
        
        PID:6132
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        139⤵
        
        PID:5224
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        140⤵
        
        PID:1276
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        140⤵
        
        PID:3872
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        141⤵
        
        PID:4508
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        141⤵
        
        PID:6124
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        142⤵
        
        PID:5424
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        142⤵
        
        PID:5132
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        143⤵
        
        PID:5752
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        143⤵
        
        PID:5968
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        144⤵
        
        PID:5828
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        144⤵
        
        PID:4076
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        145⤵
        
        PID:5512
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        145⤵
        
        PID:4220
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        146⤵
        
        PID:5468
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        146⤵
        
        PID:5704
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        147⤵
        
        PID:5496
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        147⤵
        
        PID:5756
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        148⤵
        
        PID:4796
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        148⤵
        
        PID:4548
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        149⤵
        
        PID:4348
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        149⤵
        
        PID:5264
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        150⤵
        
        PID:5364
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        150⤵
        
        PID:6132
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        151⤵
        
        PID:5188
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        151⤵
        
        PID:5196
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        152⤵
        
        PID:5320
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        152⤵
        
        PID:5632
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        153⤵
        
        PID:5916
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        153⤵
        
        PID:1364
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        154⤵
        
        PID:6036
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        154⤵
        
        PID:4164
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        155⤵
        
        PID:5620
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        155⤵
        
        PID:6068
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        156⤵
        
        PID:5844
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        156⤵
        
        PID:5160
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        157⤵
        
        PID:1576
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        157⤵
        
        PID:5696
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        158⤵
        
        PID:5684
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        158⤵
        
        PID:5144
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        159⤵
        
        PID:5888
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        159⤵
        
        PID:6076
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        160⤵
        
        PID:5880
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        160⤵
        
        PID:4628
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        161⤵
        
        PID:5588
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        161⤵
        
        PID:5216
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        162⤵
        
        PID:6092
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        162⤵
        
        PID:5600
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        163⤵
        
        PID:6036
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        163⤵
        
        PID:6032
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        164⤵
        
        PID:6120
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        164⤵
        
        PID:3732
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        165⤵
        
        PID:5812
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        165⤵
        
        PID:3900
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        166⤵
        
        PID:5904
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        166⤵
        
        PID:5300
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        167⤵
        
        PID:5936
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        167⤵
        
        PID:204
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        168⤵
        
        PID:5324
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        168⤵
        
        PID:5156
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        169⤵
        
        PID:5644
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        169⤵
        
        PID:2784
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        170⤵
        
        PID:2204
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        170⤵
        
        PID:5448
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        171⤵
        
        PID:5548
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        171⤵
        
        PID:5440
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        172⤵
        
        PID:5516
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        172⤵
        
        PID:6208
- - C:\Users\Admin\AppData\Local\Temp\2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm...exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm...exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    PID:4216
  - - C:\Users\Admin\Documents\diagnostics\shost.exe
      "C:\Users\Admin\Documents\diagnostics\shost.exe" "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
      4⤵
      PID:2832
    - - C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        5⤵
        
        PID:4068
    - - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
        
        "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
        5⤵
        
        PID:1656
    - - C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        5⤵
        
        PID:540
      - C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        6⤵
        
        PID:3968
      - C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        6⤵
        
        PID:2964
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        7⤵
        
        PID:1216
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        7⤵
        
        PID:4592
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        8⤵
        
        PID:564
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        8⤵
        
        PID:3400
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        9⤵
        
        PID:4332
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        9⤵
        
        PID:2256
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        10⤵
        
        PID:3336
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        10⤵
        
        PID:4596
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        11⤵
        
        PID:2696
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        11⤵
        
        PID:3028
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        12⤵
        
        PID:4376
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        12⤵
        
        PID:4772
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        13⤵
        
        PID:3260
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        13⤵
        
        PID:4464
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        14⤵
        
        PID:1556
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        14⤵
        
        PID:1316
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        15⤵
        
        PID:3504
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        15⤵
        
        PID:1128
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        16⤵
        
        PID:1132
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        16⤵
        
        PID:2644
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        17⤵
        
        PID:1276
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        17⤵
        
        PID:780
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        18⤵
        
        PID:3040
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        18⤵
        
        PID:1836
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        19⤵
        
        PID:4824
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        19⤵
        
        PID:2660
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        20⤵
        
        PID:3392
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        20⤵
        
        PID:3172
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        21⤵
        
        PID:4652
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        21⤵
        
        PID:4880
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        22⤵
        
        PID:116
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        22⤵
        
        PID:1792
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        23⤵
        
        PID:1616
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        23⤵
        
        PID:4808
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        24⤵
        
        PID:4524
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        24⤵
        
        PID:1584
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        25⤵
        
        PID:2368
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        25⤵
        
        PID:4280
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        26⤵
        
        PID:1624
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        26⤵
        
        PID:3704
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        27⤵
        
        PID:4452
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        27⤵
        
        PID:2340
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        28⤵
        
        PID:208
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        28⤵
        
        PID:4940
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        29⤵
        
        PID:4684
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        29⤵
        
        PID:4120
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        30⤵
        
        PID:2600
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        30⤵
        
        PID:1952
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        31⤵
        
        PID:4508
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        31⤵
        
        PID:4404
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        32⤵
        
        PID:4196
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        32⤵
        
        PID:620
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        33⤵
        
        PID:3288
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        33⤵
        
        PID:2816
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        34⤵
        
        PID:1400
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        34⤵
        
        PID:2164
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        35⤵
        
        PID:1404
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        35⤵
        
        PID:2308
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        36⤵
        
        PID:3012
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        36⤵
        
        PID:3824
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        37⤵
        
        PID:2300
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        37⤵
        
        PID:2364
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        38⤵
        
        PID:4760
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        38⤵
        
        PID:1116
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        39⤵
        
        PID:4160
        
        C:\Windows\system32\WerFault.exe
        
        C:\Windows\system32\WerFault.exe -u -p 4160 -s 684
        40⤵
        
        PID:4736
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        39⤵
        
        PID:4884
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        40⤵
        
        PID:4820
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        40⤵
        
        PID:1628
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        41⤵
        
        PID:800
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        41⤵
        
        PID:4068
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        42⤵
        
        PID:828
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        42⤵
        
        PID:4452
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        43⤵
        
        PID:4520
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        43⤵
        
        PID:2320
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        44⤵
        
        PID:3264
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        44⤵
        
        PID:4368
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        45⤵
        
        PID:1084
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        45⤵
        
        PID:3472
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        46⤵
        
        PID:2300
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        46⤵
        
        PID:4588
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        47⤵
        
        PID:4816
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        47⤵
        
        PID:1896
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        48⤵
        
        PID:2280
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        48⤵
        
        PID:828
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        49⤵
        
        PID:604
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        49⤵
        
        PID:5000
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        50⤵
        
        PID:2876
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        50⤵
        
        PID:4756
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        51⤵
        
        PID:3796
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        51⤵
        
        PID:560
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        52⤵
        
        PID:2288
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        52⤵
        
        PID:4268
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        53⤵
        
        PID:4664
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        53⤵
        
        PID:516
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        54⤵
        
        PID:872
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        54⤵
        
        PID:992
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        55⤵
        
        PID:3132
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        55⤵
        
        PID:4816
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        56⤵
        
        PID:3864
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        56⤵
        
        PID:724
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        57⤵
        
        PID:4532
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        57⤵
        
        PID:4680
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        58⤵
        
        PID:3024
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        58⤵
        
        PID:2132
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        59⤵
        
        PID:2944
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        59⤵
        
        PID:4520
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        60⤵
        
        PID:3308
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        60⤵
        
        PID:3148
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        61⤵
        
        PID:3776
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        61⤵
        
        PID:3288
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        62⤵
        
        PID:4508
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        62⤵
        
        PID:5068
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        63⤵
        
        PID:4644
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        63⤵
        
        PID:2992
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        64⤵
        
        PID:4088
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        64⤵
        
        PID:3300
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        65⤵
        
        PID:4716
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        65⤵
        
        PID:3796
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        66⤵
        
        PID:5088
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        66⤵
        
        PID:2252
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        67⤵
        
        PID:3284
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        67⤵
        
        PID:4820
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        68⤵
        
        PID:4724
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        68⤵
        
        PID:564
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        69⤵
        
        PID:3900
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        69⤵
        
        PID:2692
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        70⤵
        
        PID:1444
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        70⤵
        
        PID:3864
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        71⤵
        
        PID:4164
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        71⤵
        
        PID:2284
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        72⤵
        
        PID:3488
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        72⤵
        
        PID:4472
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        73⤵
        
        PID:4532
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        73⤵
        
        PID:2324
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        74⤵
        
        PID:4376
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        74⤵
        
        PID:4152
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        75⤵
        
        PID:3012
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        75⤵
        
        PID:4136
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        76⤵
        
        PID:1532
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        76⤵
        
        PID:4088
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        77⤵
        
        PID:2884
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        77⤵
        
        PID:2796
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        78⤵
        
        PID:4420
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        78⤵
        
        PID:2096
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        79⤵
        
        PID:4684
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        79⤵
        
        PID:3948
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        80⤵
        
        PID:4124
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        80⤵
        
        PID:4332
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        81⤵
        
        PID:4196
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        81⤵
        
        PID:1880
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        82⤵
        
        PID:1800
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        82⤵
        
        PID:4872
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        83⤵
        
        PID:2184
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        83⤵
        
        PID:3312
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        84⤵
        
        PID:4792
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        84⤵
        
        PID:4644
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        85⤵
        
        PID:1272
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        85⤵
        
        PID:3020
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        86⤵
        
        PID:4076
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        86⤵
        
        PID:4376
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        87⤵
        
        PID:2628
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        87⤵
        
        PID:2984
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        88⤵
        
        PID:3816
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        88⤵
        
        PID:4420
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        89⤵
        
        PID:5132
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        89⤵
        
        PID:5272
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        90⤵
        
        PID:5400
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        90⤵
        
        PID:5536
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        91⤵
        
        PID:5620
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        91⤵
        
        PID:5776
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        92⤵
        
        PID:5844
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        92⤵
        
        PID:5960
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        93⤵
        
        PID:6024
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        93⤵
        
        PID:4392
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        94⤵
        
        PID:2600
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        94⤵
        
        PID:5084
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        95⤵
        
        PID:3052
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        95⤵
        
        PID:1940
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        96⤵
        
        PID:5596
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        96⤵
        
        PID:5608
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        97⤵
        
        PID:5256
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        97⤵
        
        PID:5760
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        98⤵
        
        PID:3468
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        98⤵
        
        PID:1100
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        99⤵
        
        PID:5944
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        99⤵
        
        PID:5952
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        100⤵
        
        PID:5632
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        100⤵
        
        PID:820
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        101⤵
        
        PID:5836
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        101⤵
        
        PID:1228
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        102⤵
        
        PID:876
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        102⤵
        
        PID:5288
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        103⤵
        
        PID:932
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        103⤵
        
        PID:4144
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        104⤵
        
        PID:5216
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        104⤵
        
        PID:4460
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        105⤵
        
        PID:5456
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        105⤵
        
        PID:5336
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        106⤵
        
        PID:5964
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        106⤵
        
        PID:688
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        107⤵
        
        PID:6072
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        107⤵
        
        PID:5676
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        108⤵
        
        PID:6060
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        108⤵
        
        PID:2672
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        109⤵
        
        PID:1508
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        109⤵
        
        PID:5368
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        110⤵
        
        PID:5172
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        110⤵
        
        PID:5636
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        111⤵
        
        PID:3872
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        111⤵
        
        PID:744
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        112⤵
        
        PID:1364
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        112⤵
        
        PID:5700
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        113⤵
        
        PID:4544
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        113⤵
        
        PID:5980
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        114⤵
        
        PID:6012
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        114⤵
        
        PID:5276
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        115⤵
        
        PID:5396
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        115⤵
        
        PID:5464
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        116⤵
        
        PID:6032
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        116⤵
        
        PID:4748
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        117⤵
        
        PID:5660
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        117⤵
        
        PID:5800
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        118⤵
        
        PID:5888
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        118⤵
        
        PID:6044
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        119⤵
        
        PID:5092
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        119⤵
        
        PID:5236
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        120⤵
        
        PID:5208
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        120⤵
        
        PID:5088
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        121⤵
        
        PID:4540
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        121⤵
        
        PID:5928
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        122⤵
        
        PID:5404
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        122⤵
        
        PID:4916
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        123⤵
        
        PID:5920
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        123⤵
        
        PID:5380
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        124⤵
        
        PID:5308
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        124⤵
        
        PID:5112
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        125⤵
        
        PID:1800
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        125⤵
        
        PID:3112
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        126⤵
        
        PID:5472
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        126⤵
        
        PID:5764
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        127⤵
        
        PID:5956
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        127⤵
        
        PID:5400
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        128⤵
        
        PID:5696
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        128⤵
        
        PID:5944
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        129⤵
        
        PID:4508
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        129⤵
        
        PID:5924
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        130⤵
        
        PID:5256
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        130⤵
        
        PID:2944
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        131⤵
        
        PID:5880
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        131⤵
        
        PID:5352
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        132⤵
        
        PID:3872
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        132⤵
        
        PID:5836
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        133⤵
        
        PID:5180
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        133⤵
        
        PID:5744
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        134⤵
        
        PID:5332
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        134⤵
        
        PID:4700
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        135⤵
        
        PID:5748
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        135⤵
        
        PID:5456
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        136⤵
        
        PID:4784
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        136⤵
        
        PID:5984
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        137⤵
        
        PID:4544
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        137⤵
        
        PID:5592
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        138⤵
        
        PID:6060
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        138⤵
        
        PID:312
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        139⤵
        
        PID:5736
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        139⤵
        
        PID:5532
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        140⤵
        
        PID:1616
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        140⤵
        
        PID:5908
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        141⤵
        
        PID:5508
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        141⤵
        
        PID:888
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        142⤵
        
        PID:6100
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        142⤵
        
        PID:6080
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        143⤵
        
        PID:5212
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        143⤵
        
        PID:6060
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        144⤵
        
        PID:5736
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        144⤵
        
        PID:3176
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        145⤵
        
        PID:5504
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        145⤵
        
        PID:5872
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        146⤵
        
        PID:3032
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        146⤵
        
        PID:6088
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        147⤵
        
        PID:5812
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        147⤵
        
        PID:5740
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        148⤵
        
        PID:4164
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        148⤵
        
        PID:5416
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        149⤵
        
        PID:5476
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        149⤵
        
        PID:5884
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        150⤵
        
        PID:5820
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        150⤵
        
        PID:832
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        151⤵
        
        PID:5600
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        151⤵
        
        PID:1288
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        152⤵
        
        PID:5628
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        152⤵
        
        PID:5332
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        153⤵
        
        PID:4784
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        153⤵
        
        PID:3572
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        154⤵
        
        PID:4628
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        154⤵
        
        PID:5852
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        155⤵
        
        PID:204
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        155⤵
        
        PID:5896
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        156⤵
        
        PID:5652
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        156⤵
        
        PID:1172
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        157⤵
        
        PID:3732
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        157⤵
        
        PID:5920
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        158⤵
        
        PID:1772
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        158⤵
        
        PID:5480
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        159⤵
        
        PID:5616
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        159⤵
        
        PID:5868
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        160⤵
        
        PID:1616
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        160⤵
        
        PID:5312
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        161⤵
        
        PID:5548
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        161⤵
        
        PID:5396
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        162⤵
        
        PID:5596
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        162⤵
        
        PID:4388
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        163⤵
        
        PID:5220
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        163⤵
        
        PID:3576
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        164⤵
        
        PID:5848
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        164⤵
        
        PID:5356
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        165⤵
        
        PID:3052
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        165⤵
        
        PID:4784
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        166⤵
        
        PID:5460
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        166⤵
        
        PID:5344
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        167⤵
        
        PID:5220
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        167⤵
        
        PID:5948
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        168⤵
        
        PID:2280
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        168⤵
        
        PID:5900
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        169⤵
        
        PID:6004
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        169⤵
        
        PID:2876
        
        C:\Users\Admin\Documents\diagnostics\audiodg.exe
        
        "C:\Users\Admin\Documents\diagnostics\audiodg.exe"
        170⤵
        
        PID:5892
        
        C:\Users\Admin\Documents\diagnostics\shost.exe
        
        "C:\Users\Admin\Documents\diagnostics\shost.exe"
        170⤵
        
        PID:6200

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Change Default File Association

T1546.001

Privilege Escalation

Event Triggered Execution

T1546

Change Default File Association

T1546.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm...exe

Path C:\Users\Admin\AppData\Local\Temp\2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm...exe
Size 415KB
SHA256 030b9980e7943effcc779617f2f92d679d81b3e69b46dda48e8aea524597ef98
MD5 57327d9cf9dd3c6c6796e340efd4cb0b
SHA1 3163ce5cfadc9497dca4405d499ba1807e481d44
SHA512 a74ee45f2f05618b7a9813b40e4accad9c952890d979b141f0836bbe6a2f93ea6ea05d092c1516c9ca025c0d3e653175ee24af86449a78270a7b4e7cbf155f1e
SSDEEP 6144:dc90CA0QawtUrqNUk0BX3h3KuemLqd7C1io0edeuVkHbHnHPAqYvr6yRIv:Oa0wIk0BX3RKuemGd70ioGuVWW6oIv
TLSH
T1C7947C1077D0C036F1B329368ABFD724552DB8715F6886CFA388166E5EB06E1EA3171B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm..exe

Path C:\Users\Admin\AppData\Local\Temp\2026-08-04_e023171329c49dd9aceeda38f20def8f_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_stop_vidar_xworm..exe
Size 792KB
SHA256 df3632ec7992f96b63b970719e0845701dc9f76b8a9c2499db1039b20d882e60
MD5 f73e3c91ad41362b005ada8f22167310
SHA1 b650a864efb47007d220c32adf45383f68ccfb9c
SHA512 88c259ad372daa0471910e2e42e70e1713d2485527be19cfce35df40a1a39572a612e9810453bc466ddd3ef2b85244a629d94312e85861d85aefd5bcbf0a540f
SSDEEP 12288:pYCDi50NiQDuysMFZzN/E/msuY7s3a0wIk0BX3RKuemGd70ioGuVWW6oIv:693gewafDd70iTWCv
TLSH
T1A405AD11F7808039F4A359358ABF9725993DB8A61F759ACF53C8032E1E727E09E34726
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AdobeARM.log

Path C:\Users\Admin\AppData\Local\Temp\AdobeARM.log
Size 178B
SHA256 0c1df187cfa58528d929ff870ef63a49e5bd4a91e60455e10503a99469f72b38
MD5 24058652453791b86bd4bbf929fc6ed1
SHA1 184c5b4941887d63229114393e8eacb5752ef35d
SHA512 ff5fa22b9058608b288f812266a7fcd0ff03071fb3651113cdb07aacb5aa1c612fc4cbb53a464ca7ac9f713ee3822f33b5a1e37fc66fa5b9d83b354e24ae4cad
TLSH
T112C0120605BF50090FA7008DA9622FD2A887B1908EA28A20B2303F86ACA55060F1BC1C
MD5 SHA1 SHA512 TLSH

Submit Download

ArmUI.ini

Path C:\Users\Admin\AppData\Local\Temp\ArmUI.ini
Size 251KB
SHA256 b4d4dcd9594d372d7c0c975d80ef5802c88502895ed4b8a26ca62e225f2f18b0
MD5 864c22fb9a1c0670edf01c6ed3e4fbe4
SHA1 bf636f8baed998a1eb4531af9e833e6d3d8df129
SHA512 ff23616ee67d51daa2640ae638f59a8d331930a29b98c2d1bd3b236d2f651f243f9bae38d58515714886cfbb13b9be721d490aad4f2d10cbba74d7701ab34e09
SSDEEP 3072:wT4DJAvCXkQqSmSgojgTaDuK1+4xKtaU/QX5Pm9vR549QHmYPCjTMNro0Jnxu4Fn:xvUzH5
TLSH
T1B144E44363FC1209F6F37B41EEB852A44B77BDA5AA3EC15D1184015E08F5A90DA72BB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

audiodg.exe

Path C:\Users\Admin\Documents\diagnostics\audiodg.exe
Size 62KB
SHA256 e59adaa13fdbaa2c529e536fc46c13a7287d6507be398cb36705907513dc6420
MD5 35ff5e0cdcea32dedcdd83b7fc99d780
SHA1 44b0b9ddd417a29ca892db5ed45b0b669531427b
SHA512 2c830b8b6e27c33a4b13c6830834489b13ff5c91291b1bcc7c3028a9cec652de4081928ed334ce672e906b65ff6e4a0c264ed87a5bd42b1826234109a477db19
SSDEEP 1536:QAw5A/msOFA3asSkD6nFHbAVecYpbExJO1EA+BEd:QE/msHasdDOFHbAMbExJO1EbEd
TLSH
T1F6535B18BBE60125E5BF6FB158F53266DB39F6635903D62F28C602871A23E85CD006FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shost.exe

Path C:\Users\Admin\Documents\diagnostics\shost.exe
Size 377KB
SHA256 1b77a4992032f2c421fe50a0e28b69425c1785ac0ffa9752e151dd21f83a0b4d
MD5 f1ab89fc49509b5613c87f24fb3c3941
SHA1 610a89ceccced953ccda61f1f67e50bb0eaaa917
SHA512 58f58390a76b81f86492d4648792d38872a32c73fc2b395638dad0b9ce998889c9a51f5445f5e9c1878f92335bd18b34ff534722b0419bc2e534d04ca9e7c293
SSDEEP 6144:p+GYnA0zeW8Di50JziQ8kd3f+RysMFZzN/E/msHOtbSHqNsarw:pYCDi50NiQDuysMFZzN/E/msuY7s
TLSH
T17C848C06F75408F9D59BC57489924646DA39BC8F1B72EAEF17C8422A2F237F08E39750
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4736-19-0x0000000000800000-0x0000000000816000-memory.dmp

Download