4de7625125a094c97c64a4614ae72f4cc979baab54d3e2c4d90fd01b648c649a

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/08/2026, 16:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
4de7625125a094c97c64a4614ae72f4cc979baab54d3e2c4d90fd01b648c649a.exe
Size 9.4MB
Sample260831-vbvmtswglc
SHA256 4de7625125a094c97c64a4614ae72f4cc979baab54d3e2c4d90fd01b648c649a
MD5 27843ffb7d043fa95c1ab395ee986c7f
SHA1 26629349c0341041d80062a189fb430cb3ba2d9e
SHA512 2ba3e2ca73a119ac61e326706d1a7114e34e153669685a99b92cf76393b464c7a64e9e3d2ad685ff1262ad171798c03cc2bdd827884e21db74dc3d650c370d2f
SSDEEP 98304:H7GpL4IFkDS1foMqv4Yop7IyoB+QBPDE7uS:H7GpZ31foMqtB+QBPDEp
TLSH
T146A649525B970EB0DCE72FB5B59F233D8B25ED368EA90DB8E54CC104A1431986D2FB90
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 64 IoCs

pid	Process
2472	mutated_10617.exe
3928	mutated_10617.exe
4192	mutated_10617.exe
3084	mutated_10617.exe
3376	mutated_10617.exe
3468	mutated_10617.exe
3120	mutated_1912.exe
4460	mutated_1912.exe
1048	mutated_1912.exe
3544	mutated_1912.exe
436	mutated_1912.exe
3916	mutated_1912.exe
4920	mutated_1912.exe
2780	mutated_1912.exe
3164	mutated_1912.exe
2244	mutated_1912.exe
2384	mutated_1912.exe
4468	mutated_1912.exe
4560	mutated_1912.exe
4504	mutated_1912.exe
2528	mutated_1912.exe
1812	mutated_1912.exe
5056	mutated_18903.exe
552	mutated_18903.exe
4940	mutated_18903.exe
4448	mutated_18903.exe
4408	mutated_18903.exe
3712	mutated_18903.exe
2240	mutated_18903.exe
1792	mutated_18903.exe
3984	mutated_18903.exe
4208	mutated_18903.exe
1892	mutated_18903.exe
3636	mutated_18903.exe
1708	mutated_18903.exe
212	mutated_18903.exe
860	mutated_18903.exe
332	mutated_17271.exe
3228	mutated_17271.exe
4792	mutated_17271.exe
1540	mutated_17271.exe
4276	mutated_17271.exe
3772	mutated_17271.exe
916	mutated_17271.exe
4860	mutated_17271.exe
3692	mutated_17271.exe
3824	mutated_17271.exe
884	mutated_17271.exe
4904	mutated_17271.exe
2724	mutated_17271.exe
732	mutated_17271.exe
1260	mutated_17271.exe
4764	mutated_17271.exe
1000	mutated_21863.exe
1028	mutated_21863.exe
2372	mutated_21863.exe
2436	mutated_21863.exe
5032	mutated_21863.exe
4708	mutated_21863.exe
5024	mutated_21863.exe
3516	mutated_21863.exe
2052	mutated_21863.exe
4248	mutated_21863.exe
3536	mutated_21863.exe

Program crash 1 IoCs

pid	pid_target	Process
7648	7724	WerFault.exe

System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_7017.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_29030.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_6755.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_27481.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_13169.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_4465.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_732.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_31582.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_30438.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_7017.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_6755.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_18494.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_9920.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_30438.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_23925.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_17271.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_13169.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_9817.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_29030.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_11620.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_5468.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_27481.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_15722.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_732.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_31582.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_5468.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_30438.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_20827.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_363.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_363.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_7017.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_30540.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_18274.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_24928.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_24928.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_5468.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_18903.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_18801.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_9817.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_2916.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_4465.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_21557.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_14173.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_6959.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_4465.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_7017.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_22376.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_2916.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_24928.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_9920.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_30579.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_732.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_18596.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_31582.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_630.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_27481.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_9817.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_363.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_732.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_9613.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_30642.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_21455.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_26477.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_9068.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4872 wrote to memory of 2472	4872	4de7625125a094c97c64a4614ae72f4cc979baab54d3e2c4d90fd01b648c649a.exe	87
PID 2472 wrote to memory of 3928	2472	mutated_10617.exe	88
PID 3928 wrote to memory of 4192	3928	mutated_10617.exe	89
PID 4192 wrote to memory of 3084	4192	mutated_10617.exe	90
PID 3084 wrote to memory of 3376	3084	mutated_10617.exe	91
PID 3376 wrote to memory of 3468	3376	mutated_10617.exe	92
PID 3468 wrote to memory of 3120	3468	mutated_10617.exe	93
PID 3120 wrote to memory of 4460	3120	mutated_1912.exe	94
PID 4460 wrote to memory of 1048	4460	mutated_1912.exe	95
PID 1048 wrote to memory of 3544	1048	mutated_1912.exe	96
PID 3544 wrote to memory of 436	3544	mutated_1912.exe	97
PID 436 wrote to memory of 3916	436	mutated_1912.exe	98
PID 3916 wrote to memory of 4920	3916	mutated_1912.exe	99
PID 4920 wrote to memory of 2780	4920	mutated_1912.exe	100
PID 2780 wrote to memory of 3164	2780	mutated_1912.exe	101
PID 3164 wrote to memory of 2244	3164	mutated_1912.exe	102
PID 2244 wrote to memory of 2384	2244	mutated_1912.exe	103
PID 2384 wrote to memory of 4468	2384	mutated_1912.exe	104
PID 4468 wrote to memory of 4560	4468	mutated_1912.exe	105
PID 4560 wrote to memory of 4504	4560	mutated_1912.exe	106
PID 4504 wrote to memory of 2528	4504	mutated_1912.exe	107
PID 2528 wrote to memory of 1812	2528	mutated_1912.exe	108
PID 1812 wrote to memory of 5056	1812	mutated_1912.exe	109
PID 5056 wrote to memory of 552	5056	mutated_18903.exe	110
PID 552 wrote to memory of 4940	552	mutated_18903.exe	111
PID 4940 wrote to memory of 4448	4940	mutated_18903.exe	112
PID 4448 wrote to memory of 4408	4448	mutated_18903.exe	113
PID 4408 wrote to memory of 3712	4408	mutated_18903.exe	114
PID 3712 wrote to memory of 2240	3712	mutated_18903.exe	115
PID 2240 wrote to memory of 1792	2240	mutated_18903.exe	116
PID 1792 wrote to memory of 3984	1792	mutated_18903.exe	117
PID 3984 wrote to memory of 4208	3984	mutated_18903.exe	118
PID 4208 wrote to memory of 1892	4208	mutated_18903.exe	119
PID 1892 wrote to memory of 3636	1892	mutated_18903.exe	120
PID 3636 wrote to memory of 1708	3636	mutated_18903.exe	121
PID 1708 wrote to memory of 212	1708	mutated_18903.exe	122
PID 212 wrote to memory of 860	212	mutated_18903.exe	123
PID 860 wrote to memory of 332	860	mutated_18903.exe	124
PID 332 wrote to memory of 3228	332	mutated_17271.exe	125
PID 3228 wrote to memory of 4792	3228	mutated_17271.exe	126
PID 4792 wrote to memory of 1540	4792	mutated_17271.exe	127
PID 1540 wrote to memory of 4276	1540	mutated_17271.exe	128
PID 4276 wrote to memory of 3772	4276	mutated_17271.exe	129
PID 3772 wrote to memory of 916	3772	mutated_17271.exe	130
PID 916 wrote to memory of 4860	916	mutated_17271.exe	131
PID 4860 wrote to memory of 3692	4860	mutated_17271.exe	132
PID 3692 wrote to memory of 3824	3692	mutated_17271.exe	133
PID 3824 wrote to memory of 884	3824	mutated_17271.exe	134
PID 884 wrote to memory of 4904	884	mutated_17271.exe	135
PID 4904 wrote to memory of 2724	4904	mutated_17271.exe	136
PID 2724 wrote to memory of 732	2724	mutated_17271.exe	137
PID 732 wrote to memory of 1260	732	mutated_17271.exe	138
PID 1260 wrote to memory of 4764	1260	mutated_17271.exe	139
PID 4764 wrote to memory of 1000	4764	mutated_17271.exe	140
PID 1000 wrote to memory of 1028	1000	mutated_21863.exe	141
PID 1028 wrote to memory of 2372	1028	mutated_21863.exe	142
PID 2372 wrote to memory of 2436	2372	mutated_21863.exe	143
PID 2436 wrote to memory of 5032	2436	mutated_21863.exe	144
PID 5032 wrote to memory of 4708	5032	mutated_21863.exe	145
PID 4708 wrote to memory of 5024	4708	mutated_21863.exe	146
PID 5024 wrote to memory of 3516	5024	mutated_21863.exe	147
PID 3516 wrote to memory of 2052	3516	mutated_21863.exe	148
PID 2052 wrote to memory of 4248	2052	mutated_21863.exe	149
PID 4248 wrote to memory of 3536	4248	mutated_21863.exe	150

C:\Users\Admin\AppData\Local\Temp\4de7625125a094c97c64a4614ae72f4cc979baab54d3e2c4d90fd01b648c649a.exe
"C:\Users\Admin\AppData\Local\Temp\4de7625125a094c97c64a4614ae72f4cc979baab54d3e2c4d90fd01b648c649a.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4872
- C:\Users\Admin\AppData\Local\Temp\mutated_10617.exe
  "mutated_10617.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:2472
- - C:\Users\Admin\AppData\Local\Temp\mutated_10617.exe
    "mutated_10617.exe"
    3⤵
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:3928
  - - C:\Users\Admin\AppData\Local\Temp\mutated_10617.exe
      "mutated_10617.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of WriteProcessMemory
      PID:4192
    - - C:\Users\Admin\AppData\Local\Temp\mutated_10617.exe
        
        "mutated_10617.exe"
        5⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3084
      - C:\Users\Admin\AppData\Local\Temp\mutated_10617.exe
        
        "mutated_10617.exe"
        6⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3376
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10617.exe
        
        "mutated_10617.exe"
        7⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3468
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1912.exe
        
        "mutated_1912.exe"
        8⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3120
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1912.exe
        
        "mutated_1912.exe"
        9⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4460
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1912.exe
        
        "mutated_1912.exe"
        10⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1048
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1912.exe
        
        "mutated_1912.exe"
        11⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3544
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1912.exe
        
        "mutated_1912.exe"
        12⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:436
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1912.exe
        
        "mutated_1912.exe"
        13⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3916
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1912.exe
        
        "mutated_1912.exe"
        14⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4920
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1912.exe
        
        "mutated_1912.exe"
        15⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2780
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1912.exe
        
        "mutated_1912.exe"
        16⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3164
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1912.exe
        
        "mutated_1912.exe"
        17⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2244
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1912.exe
        
        "mutated_1912.exe"
        18⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2384
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1912.exe
        
        "mutated_1912.exe"
        19⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4468
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1912.exe
        
        "mutated_1912.exe"
        20⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4560
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1912.exe
        
        "mutated_1912.exe"
        21⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4504
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1912.exe
        
        "mutated_1912.exe"
        22⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2528
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1912.exe
        
        "mutated_1912.exe"
        23⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1812
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18903.exe
        
        "mutated_18903.exe"
        24⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5056
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18903.exe
        
        "mutated_18903.exe"
        25⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:552
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18903.exe
        
        "mutated_18903.exe"
        26⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4940
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18903.exe
        
        "mutated_18903.exe"
        27⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4448
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18903.exe
        
        "mutated_18903.exe"
        28⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4408
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18903.exe
        
        "mutated_18903.exe"
        29⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3712
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18903.exe
        
        "mutated_18903.exe"
        30⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2240
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18903.exe
        
        "mutated_18903.exe"
        31⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1792
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18903.exe
        
        "mutated_18903.exe"
        32⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3984
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18903.exe
        
        "mutated_18903.exe"
        33⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4208
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18903.exe
        
        "mutated_18903.exe"
        34⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:1892
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18903.exe
        
        "mutated_18903.exe"
        35⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3636
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18903.exe
        
        "mutated_18903.exe"
        36⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1708
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18903.exe
        
        "mutated_18903.exe"
        37⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:212
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18903.exe
        
        "mutated_18903.exe"
        38⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:860
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17271.exe
        
        "mutated_17271.exe"
        39⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:332
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17271.exe
        
        "mutated_17271.exe"
        40⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3228
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17271.exe
        
        "mutated_17271.exe"
        41⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4792
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17271.exe
        
        "mutated_17271.exe"
        42⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1540
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17271.exe
        
        "mutated_17271.exe"
        43⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4276
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17271.exe
        
        "mutated_17271.exe"
        44⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3772
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17271.exe
        
        "mutated_17271.exe"
        45⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:916
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17271.exe
        
        "mutated_17271.exe"
        46⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4860
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17271.exe
        
        "mutated_17271.exe"
        47⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3692
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17271.exe
        
        "mutated_17271.exe"
        48⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3824
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17271.exe
        
        "mutated_17271.exe"
        49⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:884
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17271.exe
        
        "mutated_17271.exe"
        50⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4904
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17271.exe
        
        "mutated_17271.exe"
        51⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:2724
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17271.exe
        
        "mutated_17271.exe"
        52⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:732
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17271.exe
        
        "mutated_17271.exe"
        53⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1260
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17271.exe
        
        "mutated_17271.exe"
        54⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4764
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21863.exe
        
        "mutated_21863.exe"
        55⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1000
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21863.exe
        
        "mutated_21863.exe"
        56⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1028
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21863.exe
        
        "mutated_21863.exe"
        57⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2372
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21863.exe
        
        "mutated_21863.exe"
        58⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2436
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21863.exe
        
        "mutated_21863.exe"
        59⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5032
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21863.exe
        
        "mutated_21863.exe"
        60⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4708
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21863.exe
        
        "mutated_21863.exe"
        61⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5024
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21863.exe
        
        "mutated_21863.exe"
        62⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3516
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21863.exe
        
        "mutated_21863.exe"
        63⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2052
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21863.exe
        
        "mutated_21863.exe"
        64⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4248
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21863.exe
        
        "mutated_21863.exe"
        65⤵
        Executes dropped EXE
        
        PID:3536
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6959.exe
        
        "mutated_6959.exe"
        66⤵
        
        PID:2224
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6959.exe
        
        "mutated_6959.exe"
        67⤵
        
        PID:4168
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6959.exe
        
        "mutated_6959.exe"
        68⤵
        
        PID:544
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6959.exe
        
        "mutated_6959.exe"
        69⤵
        
        PID:1616
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6959.exe
        
        "mutated_6959.exe"
        70⤵
        
        PID:5012
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6959.exe
        
        "mutated_6959.exe"
        71⤵
        
        PID:4544
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6959.exe
        
        "mutated_6959.exe"
        72⤵
        System Location Discovery: System Language Discovery
        
        PID:1808
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6959.exe
        
        "mutated_6959.exe"
        73⤵
        
        PID:1328
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6959.exe
        
        "mutated_6959.exe"
        74⤵
        
        PID:5092
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6959.exe
        
        "mutated_6959.exe"
        75⤵
        
        PID:856
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6959.exe
        
        "mutated_6959.exe"
        76⤵
        
        PID:2020
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6959.exe
        
        "mutated_6959.exe"
        77⤵
        
        PID:5040
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6959.exe
        
        "mutated_6959.exe"
        78⤵
        
        PID:2668
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6959.exe
        
        "mutated_6959.exe"
        79⤵
        
        PID:2720
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23925.exe
        
        "mutated_23925.exe"
        80⤵
        
        PID:1032
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23925.exe
        
        "mutated_23925.exe"
        81⤵
        
        PID:768
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23925.exe
        
        "mutated_23925.exe"
        82⤵
        System Location Discovery: System Language Discovery
        
        PID:868
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23925.exe
        
        "mutated_23925.exe"
        83⤵
        
        PID:3844
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23925.exe
        
        "mutated_23925.exe"
        84⤵
        
        PID:1144
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23925.exe
        
        "mutated_23925.exe"
        85⤵
        
        PID:1172
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23925.exe
        
        "mutated_23925.exe"
        86⤵
        
        PID:2492
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23925.exe
        
        "mutated_23925.exe"
        87⤵
        
        PID:4808
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23925.exe
        
        "mutated_23925.exe"
        88⤵
        
        PID:3540
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23925.exe
        
        "mutated_23925.exe"
        89⤵
        
        PID:1292
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23925.exe
        
        "mutated_23925.exe"
        90⤵
        
        PID:1360
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23925.exe
        
        "mutated_23925.exe"
        91⤵
        
        PID:2752
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23925.exe
        
        "mutated_23925.exe"
        92⤵
        
        PID:1080
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23925.exe
        
        "mutated_23925.exe"
        93⤵
        
        PID:3496
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23925.exe
        
        "mutated_23925.exe"
        94⤵
        
        PID:3292
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23925.exe
        
        "mutated_23925.exe"
        95⤵
        
        PID:4072
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9920.exe
        
        "mutated_9920.exe"
        96⤵
        
        PID:2688
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9920.exe
        
        "mutated_9920.exe"
        97⤵
        
        PID:1956
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9920.exe
        
        "mutated_9920.exe"
        98⤵
        
        PID:4688
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9920.exe
        
        "mutated_9920.exe"
        99⤵
        
        PID:3212
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9920.exe
        
        "mutated_9920.exe"
        100⤵
        
        PID:5028
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9920.exe
        
        "mutated_9920.exe"
        101⤵
        
        PID:4000
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9920.exe
        
        "mutated_9920.exe"
        102⤵
        
        PID:4412
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9920.exe
        
        "mutated_9920.exe"
        103⤵
        
        PID:2000
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9920.exe
        
        "mutated_9920.exe"
        104⤵
        
        PID:1056
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9920.exe
        
        "mutated_9920.exe"
        105⤵
        
        PID:800
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9920.exe
        
        "mutated_9920.exe"
        106⤵
        
        PID:4316
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9920.exe
        
        "mutated_9920.exe"
        107⤵
        
        PID:556
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9920.exe
        
        "mutated_9920.exe"
        108⤵
        System Location Discovery: System Language Discovery
        
        PID:2820
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9920.exe
        
        "mutated_9920.exe"
        109⤵
        System Location Discovery: System Language Discovery
        
        PID:1044
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27784.exe
        
        "mutated_27784.exe"
        110⤵
        
        PID:888
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27784.exe
        
        "mutated_27784.exe"
        111⤵
        
        PID:220
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27784.exe
        
        "mutated_27784.exe"
        112⤵
        
        PID:360
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27784.exe
        
        "mutated_27784.exe"
        113⤵
        
        PID:848
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27784.exe
        
        "mutated_27784.exe"
        114⤵
        
        PID:3768
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27784.exe
        
        "mutated_27784.exe"
        115⤵
        
        PID:4900
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27784.exe
        
        "mutated_27784.exe"
        116⤵
        
        PID:4640
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27784.exe
        
        "mutated_27784.exe"
        117⤵
        
        PID:3672
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27784.exe
        
        "mutated_27784.exe"
        118⤵
        
        PID:1332
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27784.exe
        
        "mutated_27784.exe"
        119⤵
        
        PID:3700
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27784.exe
        
        "mutated_27784.exe"
        120⤵
        
        PID:1184
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27784.exe
        
        "mutated_27784.exe"
        121⤵
        
        PID:1308
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27784.exe
        
        "mutated_27784.exe"
        122⤵
        
        PID:2652
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27784.exe
        
        "mutated_27784.exe"
        123⤵
        
        PID:3208
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27784.exe
        
        "mutated_27784.exe"
        124⤵
        
        PID:2556
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27784.exe
        
        "mutated_27784.exe"
        125⤵
        
        PID:1824
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27784.exe
        
        "mutated_27784.exe"
        126⤵
        
        PID:3304
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27784.exe
        
        "mutated_27784.exe"
        127⤵
        
        PID:3508
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30579.exe
        
        "mutated_30579.exe"
        128⤵
        
        PID:3776
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30579.exe
        
        "mutated_30579.exe"
        129⤵
        
        PID:4548
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30579.exe
        
        "mutated_30579.exe"
        130⤵
        
        PID:1676
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30579.exe
        
        "mutated_30579.exe"
        131⤵
        
        PID:1192
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30579.exe
        
        "mutated_30579.exe"
        132⤵
        
        PID:1136
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30579.exe
        
        "mutated_30579.exe"
        133⤵
        
        PID:692
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30579.exe
        
        "mutated_30579.exe"
        134⤵
        
        PID:4240
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30579.exe
        
        "mutated_30579.exe"
        135⤵
        
        PID:4796
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30579.exe
        
        "mutated_30579.exe"
        136⤵
        
        PID:4692
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30579.exe
        
        "mutated_30579.exe"
        137⤵
        
        PID:4948
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30579.exe
        
        "mutated_30579.exe"
        138⤵
        System Location Discovery: System Language Discovery
        
        PID:3448
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30579.exe
        
        "mutated_30579.exe"
        139⤵
        
        PID:5100
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30579.exe
        
        "mutated_30579.exe"
        140⤵
        
        PID:824
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30579.exe
        
        "mutated_30579.exe"
        141⤵
        
        PID:2324
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30579.exe
        
        "mutated_30579.exe"
        142⤵
        
        PID:2704
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30579.exe
        
        "mutated_30579.exe"
        143⤵
        
        PID:1076
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30579.exe
        
        "mutated_30579.exe"
        144⤵
        
        PID:3352
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30744.exe
        
        "mutated_30744.exe"
        145⤵
        
        PID:4196
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30744.exe
        
        "mutated_30744.exe"
        146⤵
        
        PID:2100
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30744.exe
        
        "mutated_30744.exe"
        147⤵
        
        PID:4756
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30744.exe
        
        "mutated_30744.exe"
        148⤵
        
        PID:4432
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30744.exe
        
        "mutated_30744.exe"
        149⤵
        
        PID:628
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30744.exe
        
        "mutated_30744.exe"
        150⤵
        
        PID:4832
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30744.exe
        
        "mutated_30744.exe"
        151⤵
        
        PID:4452
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30744.exe
        
        "mutated_30744.exe"
        152⤵
        
        PID:2280
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30744.exe
        
        "mutated_30744.exe"
        153⤵
        
        PID:2648
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30744.exe
        
        "mutated_30744.exe"
        154⤵
        
        PID:4580
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30744.exe
        
        "mutated_30744.exe"
        155⤵
        
        PID:3308
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30744.exe
        
        "mutated_30744.exe"
        156⤵
        
        PID:1644
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30744.exe
        
        "mutated_30744.exe"
        157⤵
        
        PID:4232
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30744.exe
        
        "mutated_30744.exe"
        158⤵
        
        PID:1756
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30744.exe
        
        "mutated_30744.exe"
        159⤵
        
        PID:2316
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13169.exe
        
        "mutated_13169.exe"
        160⤵
        
        PID:2832
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13169.exe
        
        "mutated_13169.exe"
        161⤵
        
        PID:2776
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13169.exe
        
        "mutated_13169.exe"
        162⤵
        System Location Discovery: System Language Discovery
        
        PID:1232
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13169.exe
        
        "mutated_13169.exe"
        163⤵
        
        PID:4444
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13169.exe
        
        "mutated_13169.exe"
        164⤵
        
        PID:2796
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13169.exe
        
        "mutated_13169.exe"
        165⤵
        
        PID:4488
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13169.exe
        
        "mutated_13169.exe"
        166⤵
        
        PID:1560
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13169.exe
        
        "mutated_13169.exe"
        167⤵
        
        PID:4812
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13169.exe
        
        "mutated_13169.exe"
        168⤵
        
        PID:3852
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13169.exe
        
        "mutated_13169.exe"
        169⤵
        System Location Discovery: System Language Discovery
        
        PID:2584
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13169.exe
        
        "mutated_13169.exe"
        170⤵
        
        PID:1868
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13169.exe
        
        "mutated_13169.exe"
        171⤵
        
        PID:4164
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13169.exe
        
        "mutated_13169.exe"
        172⤵
        
        PID:4552
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13169.exe
        
        "mutated_13169.exe"
        173⤵
        
        PID:4700
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13169.exe
        
        "mutated_13169.exe"
        174⤵
        
        PID:4932
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13169.exe
        
        "mutated_13169.exe"
        175⤵
        
        PID:3380
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13169.exe
        
        "mutated_13169.exe"
        176⤵
        
        PID:2300
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13169.exe
        
        "mutated_13169.exe"
        177⤵
        
        PID:2344
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13169.exe
        
        "mutated_13169.exe"
        178⤵
        
        PID:2388
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13169.exe
        
        "mutated_13169.exe"
        179⤵
        
        PID:2732
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        180⤵
        System Location Discovery: System Language Discovery
        
        PID:3736
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        181⤵
        
        PID:4596
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        182⤵
        
        PID:972
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        183⤵
        
        PID:4036
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        184⤵
        
        PID:4676
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        185⤵
        
        PID:2076
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        186⤵
        
        PID:720
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        187⤵
        
        PID:2312
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        188⤵
        
        PID:4724
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        189⤵
        
        PID:3124
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        190⤵
        
        PID:1716
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        191⤵
        
        PID:1340
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        192⤵
        System Location Discovery: System Language Discovery
        
        PID:4108
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        193⤵
        
        PID:3596
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        194⤵
        
        PID:4768
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        195⤵
        System Location Discovery: System Language Discovery
        
        PID:4672
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        196⤵
        
        PID:3056
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        197⤵
        
        PID:4620
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        198⤵
        
        PID:2656
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        199⤵
        
        PID:216
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4465.exe
        
        "mutated_4465.exe"
        200⤵
        
        PID:2580
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18801.exe
        
        "mutated_18801.exe"
        201⤵
        System Location Discovery: System Language Discovery
        
        PID:1836
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18801.exe
        
        "mutated_18801.exe"
        202⤵
        
        PID:444
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18801.exe
        
        "mutated_18801.exe"
        203⤵
        
        PID:4296
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18801.exe
        
        "mutated_18801.exe"
        204⤵
        
        PID:548
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18801.exe
        
        "mutated_18801.exe"
        205⤵
        
        PID:4124
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18801.exe
        
        "mutated_18801.exe"
        206⤵
        
        PID:3028
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18801.exe
        
        "mutated_18801.exe"
        207⤵
        
        PID:4256
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18801.exe
        
        "mutated_18801.exe"
        208⤵
        
        PID:5116
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18801.exe
        
        "mutated_18801.exe"
        209⤵
        
        PID:2888
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18801.exe
        
        "mutated_18801.exe"
        210⤵
        
        PID:4268
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18801.exe
        
        "mutated_18801.exe"
        211⤵
        
        PID:864
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18801.exe
        
        "mutated_18801.exe"
        212⤵
        
        PID:4428
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18801.exe
        
        "mutated_18801.exe"
        213⤵
        
        PID:3696
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18801.exe
        
        "mutated_18801.exe"
        214⤵
        
        PID:1264
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18801.exe
        
        "mutated_18801.exe"
        215⤵
        
        PID:432
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18801.exe
        
        "mutated_18801.exe"
        216⤵
        
        PID:2700
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18801.exe
        
        "mutated_18801.exe"
        217⤵
        
        PID:4856
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18801.exe
        
        "mutated_18801.exe"
        218⤵
        
        PID:4260
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18801.exe
        
        "mutated_18801.exe"
        219⤵
        
        PID:2068
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        220⤵
        
        PID:4156
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        221⤵
        
        PID:4864
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        222⤵
        
        PID:4780
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        223⤵
        
        PID:1700
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        224⤵
        
        PID:3320
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        225⤵
        
        PID:1240
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        226⤵
        
        PID:2348
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        227⤵
        
        PID:4716
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        228⤵
        
        PID:2844
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        229⤵
        
        PID:1440
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        230⤵
        
        PID:4140
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        231⤵
        
        PID:5096
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        232⤵
        
        PID:1752
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        233⤵
        
        PID:2444
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        234⤵
        
        PID:4200
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        235⤵
        
        PID:3888
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        236⤵
        
        PID:4492
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        237⤵
        
        PID:3224
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        238⤵
        
        PID:1680
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        239⤵
        
        PID:4728
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19823.exe
        
        "mutated_19823.exe"
        240⤵
        
        PID:2712
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        241⤵
        
        PID:1888
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        242⤵
        
        PID:3004
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        243⤵
        
        PID:1596
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        244⤵
        
        PID:1352
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        245⤵
        
        PID:3180
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        246⤵
        
        PID:3172
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        247⤵
        
        PID:1972
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        248⤵
        
        PID:1760
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        249⤵
        
        PID:2136
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        250⤵
        
        PID:3404
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        251⤵
        
        PID:4816
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        252⤵
        
        PID:728
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        253⤵
        
        PID:4748
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        254⤵
        
        PID:2932
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        255⤵
        
        PID:4636
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        256⤵
        
        PID:2356
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        257⤵
        
        PID:3196
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        258⤵
        
        PID:3060
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        259⤵
        
        PID:4436
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        260⤵
        
        PID:4848
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21761.exe
        
        "mutated_21761.exe"
        261⤵
        
        PID:1780
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6857.exe
        
        "mutated_6857.exe"
        262⤵
        
        PID:1212
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6857.exe
        
        "mutated_6857.exe"
        263⤵
        
        PID:4132
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6857.exe
        
        "mutated_6857.exe"
        264⤵
        
        PID:3732
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6857.exe
        
        "mutated_6857.exe"
        265⤵
        
        PID:4876
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6857.exe
        
        "mutated_6857.exe"
        266⤵
        
        PID:4344
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6857.exe
        
        "mutated_6857.exe"
        267⤵
        
        PID:2172
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6857.exe
        
        "mutated_6857.exe"
        268⤵
        
        PID:2380
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6857.exe
        
        "mutated_6857.exe"
        269⤵
        
        PID:3976
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6857.exe
        
        "mutated_6857.exe"
        270⤵
        
        PID:460
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6857.exe
        
        "mutated_6857.exe"
        271⤵
        
        PID:3444
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6857.exe
        
        "mutated_6857.exe"
        272⤵
        
        PID:2956
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6857.exe
        
        "mutated_6857.exe"
        273⤵
        
        PID:3096
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6857.exe
        
        "mutated_6857.exe"
        274⤵
        
        PID:3080
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6857.exe
        
        "mutated_6857.exe"
        275⤵
        
        PID:736
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6857.exe
        
        "mutated_6857.exe"
        276⤵
        
        PID:4572
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6857.exe
        
        "mutated_6857.exe"
        277⤵
        
        PID:3108
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6857.exe
        
        "mutated_6857.exe"
        278⤵
        
        PID:1620
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6857.exe
        
        "mutated_6857.exe"
        279⤵
        
        PID:5136
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6857.exe
        
        "mutated_6857.exe"
        280⤵
        
        PID:5152
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6857.exe
        
        "mutated_6857.exe"
        281⤵
        
        PID:5168
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        282⤵
        
        PID:5188
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        283⤵
        
        PID:5212
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        284⤵
        
        PID:5224
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        285⤵
        
        PID:5240
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        286⤵
        System Location Discovery: System Language Discovery
        
        PID:5256
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        287⤵
        
        PID:5272
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        288⤵
        
        PID:5288
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        289⤵
        
        PID:5304
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        290⤵
        
        PID:5320
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        291⤵
        
        PID:5336
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        292⤵
        
        PID:5352
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        293⤵
        
        PID:5368
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        294⤵
        
        PID:5384
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        295⤵
        
        PID:5400
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        296⤵
        
        PID:5416
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        297⤵
        
        PID:5432
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        298⤵
        
        PID:5448
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        299⤵
        
        PID:5464
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        300⤵
        
        PID:5480
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        301⤵
        
        PID:5496
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26477.exe
        
        "mutated_26477.exe"
        302⤵
        
        PID:5512
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        303⤵
        
        PID:5532
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        304⤵
        
        PID:5556
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        305⤵
        
        PID:5568
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        306⤵
        
        PID:5584
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        307⤵
        
        PID:5600
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        308⤵
        
        PID:5616
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        309⤵
        
        PID:5632
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        310⤵
        
        PID:5648
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        311⤵
        
        PID:5664
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        312⤵
        
        PID:5680
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        313⤵
        
        PID:5696
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        314⤵
        
        PID:5712
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        315⤵
        
        PID:5728
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        316⤵
        System Location Discovery: System Language Discovery
        
        PID:5744
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        317⤵
        
        PID:5760
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        318⤵
        
        PID:5776
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        319⤵
        
        PID:5792
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        320⤵
        
        PID:5808
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        321⤵
        System Location Discovery: System Language Discovery
        
        PID:5824
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        322⤵
        System Location Discovery: System Language Discovery
        
        PID:5840
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9817.exe
        
        "mutated_9817.exe"
        323⤵
        
        PID:5856
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        324⤵
        
        PID:5876
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        325⤵
        
        PID:5900
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        326⤵
        
        PID:5912
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        327⤵
        
        PID:5928
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        328⤵
        
        PID:5944
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        329⤵
        
        PID:5960
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        330⤵
        System Location Discovery: System Language Discovery
        
        PID:5976
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        331⤵
        
        PID:5992
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        332⤵
        
        PID:6008
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        333⤵
        
        PID:6024
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        334⤵
        
        PID:6040
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        335⤵
        
        PID:6056
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        336⤵
        
        PID:6072
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        337⤵
        
        PID:6088
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        338⤵
        
        PID:6104
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        339⤵
        
        PID:6120
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        340⤵
        
        PID:6136
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        341⤵
        
        PID:2908
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        342⤵
        
        PID:2292
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        343⤵
        
        PID:2124
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9068.exe
        
        "mutated_9068.exe"
        344⤵
        
        PID:712
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        345⤵
        
        PID:5164
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        346⤵
        
        PID:4032
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        347⤵
        
        PID:620
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        348⤵
        
        PID:5236
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        349⤵
        
        PID:5252
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        350⤵
        
        PID:5276
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        351⤵
        
        PID:5300
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        352⤵
        
        PID:5324
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        353⤵
        
        PID:5348
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        354⤵
        System Location Discovery: System Language Discovery
        
        PID:3392
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        355⤵
        
        PID:5396
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        356⤵
        System Location Discovery: System Language Discovery
        
        PID:1236
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        357⤵
        
        PID:5436
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        358⤵
        
        PID:5452
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        359⤵
        
        PID:5476
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        360⤵
        System Location Discovery: System Language Discovery
        
        PID:5484
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        361⤵
        
        PID:5508
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        362⤵
        
        PID:5204
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        363⤵
        
        PID:5552
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        364⤵
        
        PID:5564
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        365⤵
        
        PID:5588
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        366⤵
        
        PID:5280
        
        C:\Users\Admin\AppData\Local\Temp\mutated_363.exe
        
        "mutated_363.exe"
        367⤵
        
        PID:5636
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        368⤵
        
        PID:5328
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        369⤵
        
        PID:5360
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        370⤵
        
        PID:5700
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        371⤵
        
        PID:5724
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        372⤵
        
        PID:5748
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        373⤵
        
        PID:5772
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        374⤵
        
        PID:5788
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        375⤵
        
        PID:5820
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        376⤵
        
        PID:5844
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        377⤵
        
        PID:5860
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        378⤵
        
        PID:5528
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        379⤵
        
        PID:5544
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        380⤵
        
        PID:5932
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        381⤵
        
        PID:5948
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        382⤵
        
        PID:5972
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        383⤵
        
        PID:5988
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        384⤵
        
        PID:5672
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        385⤵
        
        PID:5704
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        386⤵
        
        PID:6052
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        387⤵
        System Location Discovery: System Language Discovery
        
        PID:5736
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30642.exe
        
        "mutated_30642.exe"
        388⤵
        
        PID:5768
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        389⤵
        
        PID:5784
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        390⤵
        
        PID:5816
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        391⤵
        
        PID:3828
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        392⤵
        
        PID:5864
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        393⤵
        
        PID:5884
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        394⤵
        
        PID:1736
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        395⤵
        
        PID:5208
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        396⤵
        
        PID:5936
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        397⤵
        
        PID:4664
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        398⤵
        System Location Discovery: System Language Discovery
        
        PID:5292
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        399⤵
        
        PID:5332
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        400⤵
        
        PID:5364
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        401⤵
        
        PID:3312
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        402⤵
        
        PID:4836
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        403⤵
        
        PID:6064
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        404⤵
        
        PID:5128
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        405⤵
        
        PID:5492
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        406⤵
        
        PID:5184
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        407⤵
        
        PID:5516
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        408⤵
        
        PID:5560
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        409⤵
        
        PID:5156
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        410⤵
        
        PID:5596
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15722.exe
        
        "mutated_15722.exe"
        411⤵
        
        PID:5220
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        412⤵
        
        PID:5692
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        413⤵
        
        PID:2248
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        414⤵
        
        PID:5356
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        415⤵
        
        PID:5764
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        416⤵
        System Location Discovery: System Language Discovery
        
        PID:5780
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        417⤵
        
        PID:5488
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        418⤵
        
        PID:5520
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        419⤵
        
        PID:5144
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        420⤵
        System Location Discovery: System Language Discovery
        
        PID:5916
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        421⤵
        
        PID:5592
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        422⤵
        System Location Discovery: System Language Discovery
        
        PID:5248
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        423⤵
        
        PID:6004
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        424⤵
        System Location Discovery: System Language Discovery
        
        PID:6028
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        425⤵
        
        PID:6068
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        426⤵
        
        PID:5312
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        427⤵
        
        PID:5676
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        428⤵
        
        PID:5684
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        429⤵
        
        PID:5848
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        430⤵
        
        PID:5872
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        431⤵
        
        PID:5472
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        432⤵
        
        PID:5828
        
        C:\Users\Admin\AppData\Local\Temp\mutated_7017.exe
        
        "mutated_7017.exe"
        433⤵
        
        PID:5952
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        434⤵
        
        PID:5984
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        435⤵
        
        PID:6016
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        436⤵
        
        PID:5420
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        437⤵
        
        PID:5608
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        438⤵
        
        PID:5996
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        439⤵
        
        PID:5500
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        440⤵
        
        PID:5200
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        441⤵
        
        PID:5232
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        442⤵
        
        PID:6116
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        443⤵
        
        PID:5800
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        444⤵
        
        PID:2428
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        445⤵
        
        PID:5308
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        446⤵
        
        PID:5732
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        447⤵
        
        PID:5456
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        448⤵
        
        PID:5216
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        449⤵
        
        PID:1948
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        450⤵
        
        PID:5176
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        451⤵
        
        PID:6000
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        452⤵
        
        PID:6032
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        453⤵
        
        PID:5572
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18698.exe
        
        "mutated_18698.exe"
        454⤵
        
        PID:5720
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22376.exe
        
        "mutated_22376.exe"
        455⤵
        
        PID:6092
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22376.exe
        
        "mutated_22376.exe"
        456⤵
        
        PID:5832
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22376.exe
        
        "mutated_22376.exe"
        457⤵
        
        PID:5124
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22376.exe
        
        "mutated_22376.exe"
        458⤵
        
        PID:5172
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22376.exe
        
        "mutated_22376.exe"
        459⤵
        
        PID:5920
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22376.exe
        
        "mutated_22376.exe"
        460⤵
        
        PID:2228
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22376.exe
        
        "mutated_22376.exe"
        461⤵
        
        PID:5392
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22376.exe
        
        "mutated_22376.exe"
        462⤵
        
        PID:5412
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22376.exe
        
        "mutated_22376.exe"
        463⤵
        
        PID:5404
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22376.exe
        
        "mutated_22376.exe"
        464⤵
        
        PID:5160
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22376.exe
        
        "mutated_22376.exe"
        465⤵
        
        PID:6060
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22376.exe
        
        "mutated_22376.exe"
        466⤵
        
        PID:5540
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22376.exe
        
        "mutated_22376.exe"
        467⤵
        
        PID:3952
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22376.exe
        
        "mutated_22376.exe"
        468⤵
        
        PID:5628
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22376.exe
        
        "mutated_22376.exe"
        469⤵
        
        PID:5260
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22376.exe
        
        "mutated_22376.exe"
        470⤵
        
        PID:5752
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22376.exe
        
        "mutated_22376.exe"
        471⤵
        
        PID:3872
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22376.exe
        
        "mutated_22376.exe"
        472⤵
        
        PID:5244
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22376.exe
        
        "mutated_22376.exe"
        473⤵
        
        PID:5904
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22376.exe
        
        "mutated_22376.exe"
        474⤵
        System Location Discovery: System Language Discovery
        
        PID:4600
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        475⤵
        
        PID:5624
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        476⤵
        
        PID:5340
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        477⤵
        
        PID:5620
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        478⤵
        
        PID:5408
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        479⤵
        
        PID:5140
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        480⤵
        
        PID:6036
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        481⤵
        
        PID:5376
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        482⤵
        
        PID:5388
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        483⤵
        
        PID:5460
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        484⤵
        
        PID:6012
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        485⤵
        
        PID:5536
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        486⤵
        
        PID:6132
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        487⤵
        
        PID:640
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        488⤵
        
        PID:5968
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        489⤵
        
        PID:5812
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        490⤵
        
        PID:5852
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        491⤵
        
        PID:5468
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        492⤵
        
        PID:5344
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        493⤵
        
        PID:5444
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        494⤵
        
        PID:5440
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21659.exe
        
        "mutated_21659.exe"
        495⤵
        
        PID:3968
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6755.exe
        
        "mutated_6755.exe"
        496⤵
        
        PID:5504
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6755.exe
        
        "mutated_6755.exe"
        497⤵
        
        PID:5316
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6755.exe
        
        "mutated_6755.exe"
        498⤵
        
        PID:5640
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6755.exe
        
        "mutated_6755.exe"
        499⤵
        
        PID:3456
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6755.exe
        
        "mutated_6755.exe"
        500⤵
        
        PID:6100
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6755.exe
        
        "mutated_6755.exe"
        501⤵
        
        PID:5980
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6755.exe
        
        "mutated_6755.exe"
        502⤵
        
        PID:5708
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6755.exe
        
        "mutated_6755.exe"
        503⤵
        
        PID:2772
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6755.exe
        
        "mutated_6755.exe"
        504⤵
        
        PID:5940
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6755.exe
        
        "mutated_6755.exe"
        505⤵
        
        PID:5372
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6755.exe
        
        "mutated_6755.exe"
        506⤵
        
        PID:6096
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6755.exe
        
        "mutated_6755.exe"
        507⤵
        System Location Discovery: System Language Discovery
        
        PID:5268
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6755.exe
        
        "mutated_6755.exe"
        508⤵
        
        PID:6112
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6755.exe
        
        "mutated_6755.exe"
        509⤵
        
        PID:5180
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6755.exe
        
        "mutated_6755.exe"
        510⤵
        
        PID:5132
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6755.exe
        
        "mutated_6755.exe"
        511⤵
        
        PID:5804
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6755.exe
        
        "mutated_6755.exe"
        512⤵
        
        PID:5148
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6755.exe
        
        "mutated_6755.exe"
        513⤵
        System Location Discovery: System Language Discovery
        
        PID:5612
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6755.exe
        
        "mutated_6755.exe"
        514⤵
        
        PID:5656
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        515⤵
        
        PID:5604
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        516⤵
        
        PID:6048
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        517⤵
        
        PID:5956
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        518⤵
        
        PID:3200
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        519⤵
        
        PID:6128
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        520⤵
        System Location Discovery: System Language Discovery
        
        PID:4952
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        521⤵
        
        PID:5756
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        522⤵
        
        PID:2140
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        523⤵
        System Location Discovery: System Language Discovery
        
        PID:5576
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        524⤵
        
        PID:5264
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        525⤵
        
        PID:5868
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        526⤵
        
        PID:5228
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        527⤵
        
        PID:1476
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        528⤵
        
        PID:5428
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        529⤵
        
        PID:5652
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        530⤵
        
        PID:1776
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        531⤵
        
        PID:6156
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        532⤵
        
        PID:6172
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        533⤵
        
        PID:6188
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        534⤵
        
        PID:6204
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29030.exe
        
        "mutated_29030.exe"
        535⤵
        
        PID:6220
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        536⤵
        
        PID:6240
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        537⤵
        
        PID:6264
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        538⤵
        
        PID:6276
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        539⤵
        
        PID:6292
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        540⤵
        
        PID:6308
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        541⤵
        
        PID:6324
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        542⤵
        
        PID:6340
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        543⤵
        
        PID:6356
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        544⤵
        
        PID:6372
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        545⤵
        
        PID:6388
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        546⤵
        
        PID:6404
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        547⤵
        
        PID:6420
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        548⤵
        
        PID:6436
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        549⤵
        
        PID:6452
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        550⤵
        
        PID:6468
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        551⤵
        
        PID:6484
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        552⤵
        
        PID:6500
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        553⤵
        
        PID:6516
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        554⤵
        
        PID:6532
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        555⤵
        
        PID:6548
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9715.exe
        
        "mutated_9715.exe"
        556⤵
        
        PID:6564
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        557⤵
        
        PID:6584
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        558⤵
        
        PID:6608
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        559⤵
        
        PID:6620
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        560⤵
        
        PID:6636
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        561⤵
        
        PID:6652
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        562⤵
        
        PID:6668
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        563⤵
        
        PID:6684
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        564⤵
        
        PID:6700
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        565⤵
        
        PID:6716
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        566⤵
        
        PID:6732
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        567⤵
        
        PID:6748
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        568⤵
        
        PID:6764
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        569⤵
        System Location Discovery: System Language Discovery
        
        PID:6780
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        570⤵
        
        PID:6796
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        571⤵
        
        PID:6812
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        572⤵
        
        PID:6828
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        573⤵
        
        PID:6844
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        574⤵
        
        PID:6860
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        575⤵
        
        PID:6876
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        576⤵
        
        PID:6892
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        577⤵
        
        PID:6908
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        578⤵
        
        PID:6924
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        579⤵
        
        PID:6940
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11620.exe
        
        "mutated_11620.exe"
        580⤵
        
        PID:6956
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        581⤵
        
        PID:6976
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        582⤵
        
        PID:7000
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        583⤵
        
        PID:7012
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        584⤵
        
        PID:7028
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        585⤵
        
        PID:7044
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        586⤵
        
        PID:7060
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        587⤵
        
        PID:7076
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        588⤵
        
        PID:7092
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        589⤵
        
        PID:7108
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        590⤵
        
        PID:7124
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        591⤵
        
        PID:7140
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        592⤵
        
        PID:7156
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        593⤵
        
        PID:5688
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        594⤵
        System Location Discovery: System Language Discovery
        
        PID:5192
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        595⤵
        
        PID:5888
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        596⤵
        
        PID:6152
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        597⤵
        System Location Discovery: System Language Discovery
        
        PID:6168
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        598⤵
        
        PID:6184
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        599⤵
        
        PID:5196
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        600⤵
        
        PID:6076
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        601⤵
        
        PID:6232
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        602⤵
        
        PID:6268
        
        C:\Users\Admin\AppData\Local\Temp\mutated_2916.exe
        
        "mutated_2916.exe"
        603⤵
        
        PID:6288
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        604⤵
        
        PID:6320
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        605⤵
        
        PID:6352
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        606⤵
        
        PID:6360
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        607⤵
        
        PID:6376
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        608⤵
        
        PID:6400
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        609⤵
        
        PID:6424
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        610⤵
        
        PID:6440
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        611⤵
        
        PID:6464
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        612⤵
        
        PID:6488
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        613⤵
        
        PID:6512
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        614⤵
        
        PID:6536
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        615⤵
        
        PID:6212
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        616⤵
        
        PID:6588
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        617⤵
        
        PID:6252
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        618⤵
        
        PID:6624
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        619⤵
        
        PID:6284
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        620⤵
        
        PID:6316
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        621⤵
        
        PID:6348
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        622⤵
        System Location Discovery: System Language Discovery
        
        PID:6704
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        623⤵
        
        PID:6728
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        624⤵
        
        PID:6412
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30540.exe
        
        "mutated_30540.exe"
        625⤵
        
        PID:6768
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        626⤵
        
        PID:6792
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        627⤵
        
        PID:6492
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        628⤵
        
        PID:6848
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        629⤵
        
        PID:6864
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        630⤵
        
        PID:6888
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        631⤵
        
        PID:6572
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        632⤵
        
        PID:6592
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        633⤵
        
        PID:6600
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        634⤵
        
        PID:6960
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        635⤵
        
        PID:6996
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        636⤵
        
        PID:7016
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        637⤵
        
        PID:7040
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        638⤵
        
        PID:7064
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        639⤵
        
        PID:7080
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        640⤵
        
        PID:7104
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        641⤵
        
        PID:6772
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        642⤵
        
        PID:7152
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        643⤵
        
        PID:6804
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        644⤵
        
        PID:3388
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        645⤵
        System Location Discovery: System Language Discovery
        
        PID:5964
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18274.exe
        
        "mutated_18274.exe"
        646⤵
        
        PID:6868
        
        C:\Users\Admin\AppData\Local\Temp\mutated_732.exe
        
        "mutated_732.exe"
        647⤵
        System Location Discovery: System Language Discovery
        
        PID:5380
        
        C:\Users\Admin\AppData\Local\Temp\mutated_732.exe
        
        "mutated_732.exe"
        648⤵
        System Location Discovery: System Language Discovery
        
        PID:6224
        
        C:\Users\Admin\AppData\Local\Temp\mutated_732.exe
        
        "mutated_732.exe"
        649⤵
        
        PID:6244
        
        C:\Users\Admin\AppData\Local\Temp\mutated_732.exe
        
        "mutated_732.exe"
        650⤵
        
        PID:6280
        
        C:\Users\Admin\AppData\Local\Temp\mutated_732.exe
        
        "mutated_732.exe"
        651⤵
        
        PID:6992
        
        C:\Users\Admin\AppData\Local\Temp\mutated_732.exe
        
        "mutated_732.exe"
        652⤵
        
        PID:6344
        
        C:\Users\Admin\AppData\Local\Temp\mutated_732.exe
        
        "mutated_732.exe"
        653⤵
        
        PID:7036
        
        C:\Users\Admin\AppData\Local\Temp\mutated_732.exe
        
        "mutated_732.exe"
        654⤵
        System Location Discovery: System Language Discovery
        
        PID:6384
        
        C:\Users\Admin\AppData\Local\Temp\mutated_732.exe
        
        "mutated_732.exe"
        655⤵
        
        PID:5296
        
        C:\Users\Admin\AppData\Local\Temp\mutated_732.exe
        
        "mutated_732.exe"
        656⤵
        
        PID:7100
        
        C:\Users\Admin\AppData\Local\Temp\mutated_732.exe
        
        "mutated_732.exe"
        657⤵
        
        PID:6472
        
        C:\Users\Admin\AppData\Local\Temp\mutated_732.exe
        
        "mutated_732.exe"
        658⤵
        System Location Discovery: System Language Discovery
        
        PID:6504
        
        C:\Users\Admin\AppData\Local\Temp\mutated_732.exe
        
        "mutated_732.exe"
        659⤵
        
        PID:7164
        
        C:\Users\Admin\AppData\Local\Temp\mutated_732.exe
        
        "mutated_732.exe"
        660⤵
        
        PID:6228
        
        C:\Users\Admin\AppData\Local\Temp\mutated_732.exe
        
        "mutated_732.exe"
        661⤵
        
        PID:6248
        
        C:\Users\Admin\AppData\Local\Temp\mutated_732.exe
        
        "mutated_732.exe"
        662⤵
        
        PID:3396
        
        C:\Users\Admin\AppData\Local\Temp\mutated_732.exe
        
        "mutated_732.exe"
        663⤵
        
        PID:6300
        
        C:\Users\Admin\AppData\Local\Temp\mutated_732.exe
        
        "mutated_732.exe"
        664⤵
        
        PID:6680
        
        C:\Users\Admin\AppData\Local\Temp\mutated_732.exe
        
        "mutated_732.exe"
        665⤵
        
        PID:6108
        
        C:\Users\Admin\AppData\Local\Temp\mutated_732.exe
        
        "mutated_732.exe"
        666⤵
        
        PID:6720
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18596.exe
        
        "mutated_18596.exe"
        667⤵
        
        PID:6428
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18596.exe
        
        "mutated_18596.exe"
        668⤵
        
        PID:6460
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18596.exe
        
        "mutated_18596.exe"
        669⤵
        
        PID:5880
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18596.exe
        
        "mutated_18596.exe"
        670⤵
        
        PID:6416
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18596.exe
        
        "mutated_18596.exe"
        671⤵
        System Location Discovery: System Language Discovery
        
        PID:6872
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18596.exe
        
        "mutated_18596.exe"
        672⤵
        
        PID:6904
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18596.exe
        
        "mutated_18596.exe"
        673⤵
        
        PID:6936
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18596.exe
        
        "mutated_18596.exe"
        674⤵
        
        PID:6180
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18596.exe
        
        "mutated_18596.exe"
        675⤵
        
        PID:6552
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18596.exe
        
        "mutated_18596.exe"
        676⤵
        
        PID:7024
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18596.exe
        
        "mutated_18596.exe"
        677⤵
        
        PID:6692
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18596.exe
        
        "mutated_18596.exe"
        678⤵
        
        PID:6724
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18596.exe
        
        "mutated_18596.exe"
        679⤵
        
        PID:6672
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18596.exe
        
        "mutated_18596.exe"
        680⤵
        
        PID:7144
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18596.exe
        
        "mutated_18596.exe"
        681⤵
        
        PID:6380
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18596.exe
        
        "mutated_18596.exe"
        682⤵
        
        PID:6044
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18596.exe
        
        "mutated_18596.exe"
        683⤵
        
        PID:6760
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18596.exe
        
        "mutated_18596.exe"
        684⤵
        
        PID:6784
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18596.exe
        
        "mutated_18596.exe"
        685⤵
        
        PID:6476
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18596.exe
        
        "mutated_18596.exe"
        686⤵
        
        PID:5284
        
        C:\Users\Admin\AppData\Local\Temp\mutated_24928.exe
        
        "mutated_24928.exe"
        687⤵
        
        PID:6988
        
        C:\Users\Admin\AppData\Local\Temp\mutated_24928.exe
        
        "mutated_24928.exe"
        688⤵
        
        PID:7020
        
        C:\Users\Admin\AppData\Local\Temp\mutated_24928.exe
        
        "mutated_24928.exe"
        689⤵
        
        PID:6928
        
        C:\Users\Admin\AppData\Local\Temp\mutated_24928.exe
        
        "mutated_24928.exe"
        690⤵
        
        PID:6408
        
        C:\Users\Admin\AppData\Local\Temp\mutated_24928.exe
        
        "mutated_24928.exe"
        691⤵
        
        PID:6676
        
        C:\Users\Admin\AppData\Local\Temp\mutated_24928.exe
        
        "mutated_24928.exe"
        692⤵
        
        PID:6164
        
        C:\Users\Admin\AppData\Local\Temp\mutated_24928.exe
        
        "mutated_24928.exe"
        693⤵
        
        PID:6196
        
        C:\Users\Admin\AppData\Local\Temp\mutated_24928.exe
        
        "mutated_24928.exe"
        694⤵
        
        PID:7112
        
        C:\Users\Admin\AppData\Local\Temp\mutated_24928.exe
        
        "mutated_24928.exe"
        695⤵
        
        PID:7160
        
        C:\Users\Admin\AppData\Local\Temp\mutated_24928.exe
        
        "mutated_24928.exe"
        696⤵
        
        PID:5836
        
        C:\Users\Admin\AppData\Local\Temp\mutated_24928.exe
        
        "mutated_24928.exe"
        697⤵
        
        PID:6836
        
        C:\Users\Admin\AppData\Local\Temp\mutated_24928.exe
        
        "mutated_24928.exe"
        698⤵
        
        PID:6140
        
        C:\Users\Admin\AppData\Local\Temp\mutated_24928.exe
        
        "mutated_24928.exe"
        699⤵
        
        PID:6208
        
        C:\Users\Admin\AppData\Local\Temp\mutated_24928.exe
        
        "mutated_24928.exe"
        700⤵
        System Location Discovery: System Language Discovery
        
        PID:6296
        
        C:\Users\Admin\AppData\Local\Temp\mutated_24928.exe
        
        "mutated_24928.exe"
        701⤵
        System Location Discovery: System Language Discovery
        
        PID:6800
        
        C:\Users\Admin\AppData\Local\Temp\mutated_24928.exe
        
        "mutated_24928.exe"
        702⤵
        System Location Discovery: System Language Discovery
        
        PID:6840
        
        C:\Users\Admin\AppData\Local\Temp\mutated_24928.exe
        
        "mutated_24928.exe"
        703⤵
        
        PID:5524
        
        C:\Users\Admin\AppData\Local\Temp\mutated_24928.exe
        
        "mutated_24928.exe"
        704⤵
        
        PID:6912
        
        C:\Users\Admin\AppData\Local\Temp\mutated_24928.exe
        
        "mutated_24928.exe"
        705⤵
        
        PID:6628
        
        C:\Users\Admin\AppData\Local\Temp\mutated_24928.exe
        
        "mutated_24928.exe"
        706⤵
        
        PID:6456
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21557.exe
        
        "mutated_21557.exe"
        707⤵
        
        PID:6616
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21557.exe
        
        "mutated_21557.exe"
        708⤵
        
        PID:7096
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21557.exe
        
        "mutated_21557.exe"
        709⤵
        
        PID:7128
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21557.exe
        
        "mutated_21557.exe"
        710⤵
        
        PID:6648
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21557.exe
        
        "mutated_21557.exe"
        711⤵
        
        PID:4128
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21557.exe
        
        "mutated_21557.exe"
        712⤵
        
        PID:6176
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21557.exe
        
        "mutated_21557.exe"
        713⤵
        
        PID:6744
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21557.exe
        
        "mutated_21557.exe"
        714⤵
        
        PID:6328
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21557.exe
        
        "mutated_21557.exe"
        715⤵
        
        PID:6540
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21557.exe
        
        "mutated_21557.exe"
        716⤵
        
        PID:6368
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21557.exe
        
        "mutated_21557.exe"
        717⤵
        
        PID:6392
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21557.exe
        
        "mutated_21557.exe"
        718⤵
        
        PID:6580
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21557.exe
        
        "mutated_21557.exe"
        719⤵
        
        PID:6496
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21557.exe
        
        "mutated_21557.exe"
        720⤵
        
        PID:5716
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21557.exe
        
        "mutated_21557.exe"
        721⤵
        
        PID:6236
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21557.exe
        
        "mutated_21557.exe"
        722⤵
        
        PID:6332
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21557.exe
        
        "mutated_21557.exe"
        723⤵
        
        PID:7088
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21557.exe
        
        "mutated_21557.exe"
        724⤵
        
        PID:5740
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21557.exe
        
        "mutated_21557.exe"
        725⤵
        
        PID:6964
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21557.exe
        
        "mutated_21557.exe"
        726⤵
        System Location Discovery: System Language Discovery
        
        PID:6852
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6653.exe
        
        "mutated_6653.exe"
        727⤵
        
        PID:5580
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6653.exe
        
        "mutated_6653.exe"
        728⤵
        
        PID:6432
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6653.exe
        
        "mutated_6653.exe"
        729⤵
        
        PID:5892
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6653.exe
        
        "mutated_6653.exe"
        730⤵
        
        PID:6520
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6653.exe
        
        "mutated_6653.exe"
        731⤵
        
        PID:6756
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6653.exe
        
        "mutated_6653.exe"
        732⤵
        
        PID:5548
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6653.exe
        
        "mutated_6653.exe"
        733⤵
        
        PID:6160
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6653.exe
        
        "mutated_6653.exe"
        734⤵
        
        PID:6808
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6653.exe
        
        "mutated_6653.exe"
        735⤵
        
        PID:6604
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6653.exe
        
        "mutated_6653.exe"
        736⤵
        
        PID:6896
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6653.exe
        
        "mutated_6653.exe"
        737⤵
        
        PID:6952
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6653.exe
        
        "mutated_6653.exe"
        738⤵
        
        PID:6712
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6653.exe
        
        "mutated_6653.exe"
        739⤵
        
        PID:7148
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6653.exe
        
        "mutated_6653.exe"
        740⤵
        
        PID:7136
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6653.exe
        
        "mutated_6653.exe"
        741⤵
        
        PID:6640
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6653.exe
        
        "mutated_6653.exe"
        742⤵
        
        PID:7120
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6653.exe
        
        "mutated_6653.exe"
        743⤵
        
        PID:6312
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6653.exe
        
        "mutated_6653.exe"
        744⤵
        
        PID:6568
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6653.exe
        
        "mutated_6653.exe"
        745⤵
        
        PID:6560
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6653.exe
        
        "mutated_6653.exe"
        746⤵
        
        PID:6528
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        747⤵
        
        PID:5424
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        748⤵
        
        PID:6612
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        749⤵
        
        PID:3256
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        750⤵
        
        PID:6080
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        751⤵
        
        PID:6524
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        752⤵
        
        PID:6832
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        753⤵
        System Location Discovery: System Language Discovery
        
        PID:7004
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        754⤵
        
        PID:6576
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        755⤵
        
        PID:6984
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        756⤵
        
        PID:6260
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        757⤵
        
        PID:6788
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        758⤵
        
        PID:6020
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        759⤵
        System Location Discovery: System Language Discovery
        
        PID:5908
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        760⤵
        
        PID:6932
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        761⤵
        
        PID:6200
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        762⤵
        
        PID:6920
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        763⤵
        
        PID:5896
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        764⤵
        
        PID:6192
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        765⤵
        
        PID:6968
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        766⤵
        
        PID:6632
        
        C:\Users\Admin\AppData\Local\Temp\mutated_31582.exe
        
        "mutated_31582.exe"
        767⤵
        System Location Discovery: System Language Discovery
        
        PID:6664
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9613.exe
        
        "mutated_9613.exe"
        768⤵
        
        PID:6824
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9613.exe
        
        "mutated_9613.exe"
        769⤵
        
        PID:6776
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9613.exe
        
        "mutated_9613.exe"
        770⤵
        
        PID:5924
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9613.exe
        
        "mutated_9613.exe"
        771⤵
        
        PID:7116
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9613.exe
        
        "mutated_9613.exe"
        772⤵
        
        PID:7084
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9613.exe
        
        "mutated_9613.exe"
        773⤵
        System Location Discovery: System Language Discovery
        
        PID:7056
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9613.exe
        
        "mutated_9613.exe"
        774⤵
        
        PID:6272
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9613.exe
        
        "mutated_9613.exe"
        775⤵
        
        PID:6688
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9613.exe
        
        "mutated_9613.exe"
        776⤵
        
        PID:6148
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9613.exe
        
        "mutated_9613.exe"
        777⤵
        
        PID:6508
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9613.exe
        
        "mutated_9613.exe"
        778⤵
        
        PID:6556
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9613.exe
        
        "mutated_9613.exe"
        779⤵
        
        PID:6752
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9613.exe
        
        "mutated_9613.exe"
        780⤵
        
        PID:7008
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9613.exe
        
        "mutated_9613.exe"
        781⤵
        
        PID:6856
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9613.exe
        
        "mutated_9613.exe"
        782⤵
        
        PID:6900
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9613.exe
        
        "mutated_9613.exe"
        783⤵
        
        PID:7072
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9613.exe
        
        "mutated_9613.exe"
        784⤵
        
        PID:6660
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9613.exe
        
        "mutated_9613.exe"
        785⤵
        
        PID:6708
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9613.exe
        
        "mutated_9613.exe"
        786⤵
        
        PID:6444
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        787⤵
        
        PID:5660
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        788⤵
        
        PID:7188
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        789⤵
        
        PID:7200
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        790⤵
        
        PID:7216
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        791⤵
        
        PID:7232
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        792⤵
        
        PID:7248
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        793⤵
        
        PID:7264
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        794⤵
        
        PID:7280
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        795⤵
        
        PID:7296
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        796⤵
        
        PID:7312
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        797⤵
        
        PID:7328
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        798⤵
        
        PID:7344
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        799⤵
        
        PID:7360
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        800⤵
        
        PID:7376
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        801⤵
        
        PID:7392
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        802⤵
        
        PID:7408
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        803⤵
        System Location Discovery: System Language Discovery
        
        PID:7424
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        804⤵
        
        PID:7440
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        805⤵
        
        PID:7456
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        806⤵
        
        PID:7472
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        807⤵
        
        PID:7488
        
        C:\Users\Admin\AppData\Local\Temp\mutated_14173.exe
        
        "mutated_14173.exe"
        808⤵
        
        PID:7504
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        809⤵
        System Location Discovery: System Language Discovery
        
        PID:7524
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        810⤵
        
        PID:7548
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        811⤵
        
        PID:7560
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        812⤵
        System Location Discovery: System Language Discovery
        
        PID:7576
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        813⤵
        
        PID:7592
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        814⤵
        System Location Discovery: System Language Discovery
        
        PID:7608
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        815⤵
        
        PID:7624
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        816⤵
        
        PID:7640
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        817⤵
        
        PID:7656
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        818⤵
        
        PID:7672
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        819⤵
        
        PID:7688
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        820⤵
        
        PID:7704
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        821⤵
        
        PID:7720
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        822⤵
        
        PID:7736
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        823⤵
        
        PID:7752
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        824⤵
        
        PID:7768
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        825⤵
        
        PID:7784
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        826⤵
        
        PID:7800
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        827⤵
        
        PID:7816
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        828⤵
        
        PID:7832
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5468.exe
        
        "mutated_5468.exe"
        829⤵
        
        PID:7848
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        830⤵
        
        PID:7868
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        831⤵
        
        PID:7892
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        832⤵
        
        PID:7904
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        833⤵
        
        PID:7920
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        834⤵
        
        PID:7936
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        835⤵
        
        PID:7952
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        836⤵
        
        PID:7968
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        837⤵
        System Location Discovery: System Language Discovery
        
        PID:7984
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        838⤵
        
        PID:8000
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        839⤵
        
        PID:8016
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        840⤵
        
        PID:8032
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        841⤵
        
        PID:8048
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        842⤵
        
        PID:8064
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        843⤵
        
        PID:8080
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        844⤵
        System Location Discovery: System Language Discovery
        
        PID:8096
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        845⤵
        
        PID:8112
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        846⤵
        
        PID:8128
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        847⤵
        
        PID:8144
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        848⤵
        System Location Discovery: System Language Discovery
        
        PID:8160
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        849⤵
        
        PID:8176
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30438.exe
        
        "mutated_30438.exe"
        850⤵
        
        PID:7132
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        851⤵
        
        PID:6084
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        852⤵
        
        PID:6980
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        853⤵
        
        PID:6216
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        854⤵
        
        PID:6880
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        855⤵
        
        PID:7228
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        856⤵
        
        PID:7068
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        857⤵
        
        PID:7268
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        858⤵
        
        PID:7292
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        859⤵
        
        PID:7308
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        860⤵
        
        PID:6544
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        861⤵
        
        PID:7348
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        862⤵
        
        PID:7372
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        863⤵
        
        PID:6736
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        864⤵
        
        PID:7412
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        865⤵
        
        PID:7436
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        866⤵
        
        PID:6884
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        867⤵
        System Location Discovery: System Language Discovery
        
        PID:7476
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        868⤵
        
        PID:7176
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        869⤵
        
        PID:7508
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        870⤵
        
        PID:7208
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        871⤵
        
        PID:7556
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20827.exe
        
        "mutated_20827.exe"
        872⤵
        
        PID:7580
        
        C:\Users\Admin\AppData\Local\Temp\mutated_630.exe
        
        "mutated_630.exe"
        873⤵
        
        PID:7604
        
        C:\Users\Admin\AppData\Local\Temp\mutated_630.exe
        
        "mutated_630.exe"
        874⤵
        
        PID:7644
        
        C:\Users\Admin\AppData\Local\Temp\mutated_630.exe
        
        "mutated_630.exe"
        875⤵
        
        PID:7660
        
        C:\Users\Admin\AppData\Local\Temp\mutated_630.exe
        
        "mutated_630.exe"
        876⤵
        
        PID:7684
        
        C:\Users\Admin\AppData\Local\Temp\mutated_630.exe
        
        "mutated_630.exe"
        877⤵
        
        PID:7708
        
        C:\Users\Admin\AppData\Local\Temp\mutated_630.exe
        
        "mutated_630.exe"
        878⤵
        
        PID:7732
        
        C:\Users\Admin\AppData\Local\Temp\mutated_630.exe
        
        "mutated_630.exe"
        879⤵
        
        PID:7400
        
        C:\Users\Admin\AppData\Local\Temp\mutated_630.exe
        
        "mutated_630.exe"
        880⤵
        
        PID:7772
        
        C:\Users\Admin\AppData\Local\Temp\mutated_630.exe
        
        "mutated_630.exe"
        881⤵
        
        PID:7796
        
        C:\Users\Admin\AppData\Local\Temp\mutated_630.exe
        
        "mutated_630.exe"
        882⤵
        
        PID:7464
        
        C:\Users\Admin\AppData\Local\Temp\mutated_630.exe
        
        "mutated_630.exe"
        883⤵
        
        PID:7828
        
        C:\Users\Admin\AppData\Local\Temp\mutated_630.exe
        
        "mutated_630.exe"
        884⤵
        
        PID:7520
        
        C:\Users\Admin\AppData\Local\Temp\mutated_630.exe
        
        "mutated_630.exe"
        885⤵
        
        PID:7860
        
        C:\Users\Admin\AppData\Local\Temp\mutated_630.exe
        
        "mutated_630.exe"
        886⤵
        
        PID:7896
        
        C:\Users\Admin\AppData\Local\Temp\mutated_630.exe
        
        "mutated_630.exe"
        887⤵
        
        PID:7916
        
        C:\Users\Admin\AppData\Local\Temp\mutated_630.exe
        
        "mutated_630.exe"
        888⤵
        System Location Discovery: System Language Discovery
        
        PID:7600
        
        C:\Users\Admin\AppData\Local\Temp\mutated_630.exe
        
        "mutated_630.exe"
        889⤵
        
        PID:7632
        
        C:\Users\Admin\AppData\Local\Temp\mutated_630.exe
        
        "mutated_630.exe"
        890⤵
        
        PID:7980
        
        C:\Users\Admin\AppData\Local\Temp\mutated_630.exe
        
        "mutated_630.exe"
        891⤵
        
        PID:7664
        
        C:\Users\Admin\AppData\Local\Temp\mutated_630.exe
        
        "mutated_630.exe"
        892⤵
        
        PID:7696
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18494.exe
        
        "mutated_18494.exe"
        893⤵
        
        PID:8044
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18494.exe
        
        "mutated_18494.exe"
        894⤵
        
        PID:8076
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18494.exe
        
        "mutated_18494.exe"
        895⤵
        
        PID:8092
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18494.exe
        
        "mutated_18494.exe"
        896⤵
        
        PID:7792
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18494.exe
        
        "mutated_18494.exe"
        897⤵
        
        PID:8132
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18494.exe
        
        "mutated_18494.exe"
        898⤵
        
        PID:8156
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18494.exe
        
        "mutated_18494.exe"
        899⤵
        
        PID:8180
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18494.exe
        
        "mutated_18494.exe"
        900⤵
        
        PID:7876
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18494.exe
        
        "mutated_18494.exe"
        901⤵
        
        PID:6948
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18494.exe
        
        "mutated_18494.exe"
        902⤵
        
        PID:6304
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18494.exe
        
        "mutated_18494.exe"
        903⤵
        
        PID:7928
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18494.exe
        
        "mutated_18494.exe"
        904⤵
        System Location Discovery: System Language Discovery
        
        PID:6644
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18494.exe
        
        "mutated_18494.exe"
        905⤵
        
        PID:7052
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18494.exe
        
        "mutated_18494.exe"
        906⤵
        
        PID:7992
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18494.exe
        
        "mutated_18494.exe"
        907⤵
        
        PID:6480
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18494.exe
        
        "mutated_18494.exe"
        908⤵
        
        PID:7048
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18494.exe
        
        "mutated_18494.exe"
        909⤵
        
        PID:8056
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18494.exe
        
        "mutated_18494.exe"
        910⤵
        
        PID:7396
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        911⤵
        
        PID:8104
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        912⤵
        
        PID:8136
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        913⤵
        
        PID:8152
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        914⤵
        
        PID:7516
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        915⤵
        
        PID:7552
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        916⤵
        
        PID:6916
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        917⤵
        
        PID:7588
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        918⤵
        
        PID:7652
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        919⤵
        System Location Discovery: System Language Discovery
        
        PID:7668
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        920⤵
        System Location Discovery: System Language Discovery
        
        PID:7700
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        921⤵
        
        PID:6944
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        922⤵
        
        PID:7756
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        923⤵
        
        PID:7788
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        924⤵
        
        PID:6820
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        925⤵
        
        PID:7404
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        926⤵
        
        PID:7532
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        927⤵
        
        PID:7888
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        928⤵
        
        PID:6448
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        929⤵
        
        PID:7528
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        930⤵
        
        PID:7956
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        931⤵
        
        PID:7996
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        932⤵
        
        PID:7596
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27481.exe
        
        "mutated_27481.exe"
        933⤵
        System Location Discovery: System Language Discovery
        
        PID:8020
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        934⤵
        
        PID:7692
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        935⤵
        
        PID:7740
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        936⤵
        
        PID:7808
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        937⤵
        
        PID:7804
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        938⤵
        
        PID:8188
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        939⤵
        
        PID:6596
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        940⤵
        
        PID:7872
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        941⤵
        
        PID:7204
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        942⤵
        
        PID:7252
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        943⤵
        
        PID:7964
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        944⤵
        
        PID:7332
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        945⤵
        
        PID:7364
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        946⤵
        
        PID:8036
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        947⤵
        
        PID:5644
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        948⤵
        
        PID:7484
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        949⤵
        
        PID:8100
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        950⤵
        System Location Discovery: System Language Discovery
        
        PID:6816
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        951⤵
        
        PID:6364
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        952⤵
        
        PID:7856
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        953⤵
        
        PID:7352
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21455.exe
        
        "mutated_21455.exe"
        954⤵
        
        PID:7384
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        955⤵
        
        PID:7780
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        956⤵
        
        PID:7380
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        957⤵
        
        PID:6256
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        958⤵
        
        PID:7468
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        959⤵
        
        PID:7932
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        960⤵
        
        PID:7972
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        961⤵
        
        PID:7272
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        962⤵
        
        PID:7428
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        963⤵
        
        PID:7712
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        964⤵
        
        PID:7180
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        965⤵
        
        PID:7432
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        966⤵
        
        PID:7840
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        967⤵
        
        PID:7536
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        968⤵
        
        PID:7184
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        969⤵
        
        PID:7944
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        970⤵
        
        PID:7284
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        971⤵
        
        PID:7448
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        972⤵
        
        PID:6740
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        973⤵
        
        PID:7744
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        974⤵
        
        PID:7900
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        975⤵
        
        PID:8124
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        976⤵
        
        PID:5796
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10071.exe
        
        "mutated_10071.exe"
        977⤵
        
        PID:8004
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1367.exe
        
        "mutated_1367.exe"
        978⤵
        
        PID:7724
        
        C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 7724 -s 240
        979⤵
        Program crash
        
        PID:7648

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 7724 -ip 7724
1⤵
PID:7908

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

mutated_10617.exe

Path C:\Users\Admin\AppData\Local\Temp\mutated_10617.exe
Size 9.4MB
SHA256 005ea184bc8dc274ed367a852966473f2732ca6b05a2012425570800839fb441
MD5 66d6303e9dad7d79aae0d6d54603bc21
SHA1 25fd6d817fb52b714e68188f40801415ef946a2e
SHA512 3577440f9dcf3d960d192bb37ed61540d47ef324f573ad8ab5d95243dfd6d72dd5e94208b38d314c167709a8c703985938827c84ebeb41b2479ec97cf59a5597
SSDEEP 98304:57GpL4IFkDS1foMqv4Yop7IyoB+QBPDE7uS:57GpZ31foMqtB+QBPDEp
TLSH
T177A649525B970EB0DCE72FB5B59F233D8B25ED368EA90DB8E54CC104A1431986D2FB90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mutated_17271.exe

Path C:\Users\Admin\AppData\Local\Temp\mutated_17271.exe
Size 9.4MB
SHA256 a468aecc7ea281930c6fc927687bad72c6a0c61c2c8e39148bdbc47af21035d2
MD5 a53e5230519a583244b48432922b6baa
SHA1 cd61281455ce196b553d262a4dd0e9d33c8b0fd4
SHA512 c52b577a128d4bc40673aca602f7498f236754a6bea51f2f5e9af701d465827e38aa31f94a47e8601a34119b98f0410340840063415104788aa8d9f3e295ba62
SSDEEP 98304:z7GpL4IFkDS1foMqv4Yop7IyoB+QBPDE7uX:z7GpZ31foMqtB+QBPDEK
TLSH
T1EAA649525B970EB0DCE72FB5B59F233D8B25ED368EA90DB8E54CC104A1431986D2FB90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mutated_18903.exe

Path C:\Users\Admin\AppData\Local\Temp\mutated_18903.exe
Size 9.4MB
SHA256 a637e404015d875cb06df52516e4bf2f1b2fa52ae83ba6195cef540b9033d584
MD5 0dfd6aee390703ecfafe20cfaa94a1d9
SHA1 6d2a61490d21a2d2935f06b3e0ebdeb08d43256c
SHA512 c94e6276d3dfe85dfaf27a7f5c8b31ea88ef00951667812b57f4b9aedcd2db2c0a6cdaba1d22eee5eda87e06b73ea2407b1e24c4c4cb6cc78ac38c767913925f
SSDEEP 98304:y7GpL4IFkDS1foMqv4Yop7IyoB+QBPDE7uX:y7GpZ31foMqtB+QBPDEK
TLSH
T109A649525B970EB0DCE72FB5B59F233D8B25ED368EA90DB8E54CC104A1431986D2FB90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mutated_1912.exe

Path C:\Users\Admin\AppData\Local\Temp\mutated_1912.exe
Size 9.4MB
SHA256 e5718fd868164ce06ee2b034b32aa5b3deaae53e7320c3c117835b2c91ac3b54
MD5 4fabe4bc0b6e0ce294e243f723a91950
SHA1 95e270b2cade528a399a177ccff7ee6d22357b4b
SHA512 0c1e72fd12876e1081f0d4cdf6fe9a1d03ab0fe77c453c15f97fee28f4aa319c031337fb74e836287d21b072cd12489b4821780f4a04be50545ee9c2018a1d8b
SSDEEP 98304:y7GpL4IFkDS1foMqv4Yop7IyoB+QBPDE7uS:y7GpZ31foMqtB+QBPDEp
TLSH
T1FEA649525B970EB0DCE72FB5B59F233D8B25ED368EA90DB8E54CC104A1431986D2FB90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mutated_21863.exe

Path C:\Users\Admin\AppData\Local\Temp\mutated_21863.exe
Size 9.4MB
SHA256 2d50e906344ad9d2975619e29b27d82da840828c9f4a4d360330ccddc61cfb39
MD5 3e83801d40565da846c609872453b5c8
SHA1 b5f79e0009b05c2828541a40a3a97688c34d6a46
SHA512 18f6f02ef34ad6b2625677b7354f0d2fdf71a7f6870867f471651c79bc4e8c4b03386650e12ba03a6e00e3dc3a9aed27628824edd13cbded534e7b34c6a97d67
SSDEEP 98304:z7GpL4IFkDS1foMqv4Yop7IyoB+QBPDE7uP:z7GpZ31foMqtB+QBPDEE
TLSH
T1B2A649525B970EB0DCE72FB5B59F233D8B25ED368EA90DB8E54CC104A1431986D2FB90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/212-84-0x00000000000C0000-0x0000000000A25000-memory.dmp

Download

memory/332-90-0x0000000000670000-0x0000000000FD5000-memory.dmp

Download

memory/436-30-0x0000000000BD0000-0x0000000001535000-memory.dmp

Download

memory/552-59-0x00000000000C0000-0x0000000000A25000-memory.dmp

Download

memory/732-116-0x0000000000670000-0x0000000000FD5000-memory.dmp

Download

memory/860-88-0x00000000000C0000-0x0000000000A25000-memory.dmp

Download

memory/884-109-0x0000000000670000-0x0000000000FD5000-memory.dmp

Download

memory/916-102-0x0000000000670000-0x0000000000FD5000-memory.dmp

Download

memory/1000-124-0x0000000000AB0000-0x0000000001415000-memory.dmp

Download

memory/1028-126-0x0000000000AB0000-0x0000000001415000-memory.dmp

Download

memory/1048-26-0x0000000000BD0000-0x0000000001535000-memory.dmp

Download

memory/1260-118-0x0000000000670000-0x0000000000FD5000-memory.dmp

Download

memory/1540-96-0x0000000000670000-0x0000000000FD5000-memory.dmp

Download

memory/1708-83-0x00000000000C0000-0x0000000000A25000-memory.dmp

Download

memory/1792-71-0x00000000000C0000-0x0000000000A25000-memory.dmp

Download

memory/1812-55-0x0000000000BD0000-0x0000000001535000-memory.dmp

Download

memory/1892-77-0x00000000000C0000-0x0000000000A25000-memory.dmp

Download

memory/2052-136-0x0000000000AB0000-0x0000000001415000-memory.dmp

Download

memory/2240-69-0x00000000000C0000-0x0000000000A25000-memory.dmp

Download

memory/2244-40-0x0000000000BD0000-0x0000000001535000-memory.dmp

Download

memory/2372-128-0x0000000000AB0000-0x0000000001415000-memory.dmp

Download

memory/2384-42-0x0000000000BD0000-0x0000000001535000-memory.dmp

Download

memory/2436-130-0x0000000000AB0000-0x0000000001415000-memory.dmp

Download

memory/2472-5-0x00000000007E0000-0x0000000001145000-memory.dmp

Download

memory/2528-51-0x0000000000BD0000-0x0000000001535000-memory.dmp

Download

memory/2724-114-0x0000000000670000-0x0000000000FD5000-memory.dmp

Download

memory/2780-36-0x0000000000BD0000-0x0000000001535000-memory.dmp

Download

memory/3084-10-0x00000000007E0000-0x0000000001145000-memory.dmp

Download

memory/3120-22-0x0000000000BD0000-0x0000000001535000-memory.dmp

Download

memory/3164-38-0x0000000000BD0000-0x0000000001535000-memory.dmp

Download

memory/3228-92-0x0000000000670000-0x0000000000FD5000-memory.dmp

Download

memory/3376-13-0x00000000007E0000-0x0000000001145000-memory.dmp

Download

memory/3468-17-0x00000000007E0000-0x0000000001145000-memory.dmp

Download

memory/3516-135-0x0000000000AB0000-0x0000000001415000-memory.dmp

Download

memory/3536-140-0x0000000000AB0000-0x0000000001415000-memory.dmp

Download

memory/3544-28-0x0000000000BD0000-0x0000000001535000-memory.dmp

Download

memory/3636-79-0x00000000000C0000-0x0000000000A25000-memory.dmp

Download

memory/3692-106-0x0000000000670000-0x0000000000FD5000-memory.dmp

Download

memory/3712-67-0x00000000000C0000-0x0000000000A25000-memory.dmp

Download

memory/3772-100-0x0000000000670000-0x0000000000FD5000-memory.dmp

Download

memory/3824-108-0x0000000000670000-0x0000000000FD5000-memory.dmp

Download

memory/3916-32-0x0000000000BD0000-0x0000000001535000-memory.dmp

Download

memory/3928-8-0x00000000007E0000-0x0000000001145000-memory.dmp

Download

memory/3984-73-0x00000000000C0000-0x0000000000A25000-memory.dmp

Download

memory/4192-11-0x00000000007E0000-0x0000000001145000-memory.dmp

Download

memory/4208-75-0x00000000000C0000-0x0000000000A25000-memory.dmp

Download

memory/4248-138-0x0000000000AB0000-0x0000000001415000-memory.dmp

Download

memory/4276-98-0x0000000000670000-0x0000000000FD5000-memory.dmp

Download

memory/4408-65-0x00000000000C0000-0x0000000000A25000-memory.dmp

Download

memory/4448-63-0x00000000000C0000-0x0000000000A25000-memory.dmp

Download

memory/4468-44-0x0000000000BD0000-0x0000000001535000-memory.dmp

Download

memory/4504-50-0x0000000000BD0000-0x0000000001535000-memory.dmp

Download

memory/4560-46-0x0000000000BD0000-0x0000000001535000-memory.dmp

Download

memory/4708-133-0x0000000000AB0000-0x0000000001415000-memory.dmp

Download

memory/4764-122-0x0000000000670000-0x0000000000FD5000-memory.dmp

Download

memory/4792-94-0x0000000000670000-0x0000000000FD5000-memory.dmp

Download

memory/4860-104-0x0000000000670000-0x0000000000FD5000-memory.dmp

Download

memory/4872-3-0x0000000000930000-0x0000000001295000-memory.dmp

Download

memory/4904-112-0x0000000000670000-0x0000000000FD5000-memory.dmp

Download

memory/4920-34-0x0000000000BD0000-0x0000000001535000-memory.dmp

Download

memory/4940-61-0x00000000000C0000-0x0000000000A25000-memory.dmp

Download

memory/5024-134-0x0000000000AB0000-0x0000000001415000-memory.dmp

Download

memory/5032-132-0x0000000000AB0000-0x0000000001415000-memory.dmp

Download

memory/5056-57-0x00000000000C0000-0x0000000000A25000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads