26ca6a675342db11ec3cf8fe124b61c0790fe46977c4d1f946fb0cba9ce49dd0

Analysis

max time kernel
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/09/2026, 22:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
26ca6a675342db11ec3cf8fe124b61c0790fe46977c4d1f946fb0cba9ce49dd0.exe
Size 9.4MB
Sample260916-2ktkfsgl21
SHA256 26ca6a675342db11ec3cf8fe124b61c0790fe46977c4d1f946fb0cba9ce49dd0
MD5 074df02f716a6f1d5927fd77ceddd4e6
SHA1 b808921b27c99dfa58ba881e3fc871aeb318976a
SHA512 e05cb1ac1ce554284930c63667a065eab4d3b15da99de4e61d7645f9605e9d558d96f9f21133a127c3b668e8e7e9e1f7458bbe8a149001c9b9669191d728e77a
SSDEEP 98304:U7GpL4IFkDS1foMqv4Yop7IyoB+QBPDE7uu:U7GpZ31foMqtB+QBPDE1
TLSH
T19CA649525B970EB0DCE72FB5B59F233D8B25ED368EA90DB8E54CC104A1431986D2FB90
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 64 IoCs

pid	Process
1904	mutated_27056.exe
2756	mutated_27056.exe
4964	mutated_27056.exe
3224	mutated_27056.exe
1536	mutated_27056.exe
2404	mutated_27056.exe
3472	mutated_27056.exe
4412	mutated_27056.exe
2352	mutated_27056.exe
396	mutated_27056.exe
3464	mutated_27056.exe
464	mutated_27056.exe
2296	mutated_10096.exe
2316	mutated_10096.exe
2928	mutated_10096.exe
1980	mutated_10096.exe
2380	mutated_10096.exe
712	mutated_10096.exe
4712	mutated_10096.exe
4748	mutated_10096.exe
3808	mutated_10096.exe
2524	mutated_10096.exe
1312	mutated_10096.exe
1272	mutated_10096.exe
5116	mutated_10096.exe
2116	mutated_10096.exe
3812	mutated_10096.exe
3896	mutated_10096.exe
4244	mutated_30016.exe
3932	mutated_30016.exe
968	mutated_30016.exe
4600	mutated_30016.exe
1528	mutated_30016.exe
4116	mutated_30016.exe
1928	mutated_30016.exe
4992	mutated_30016.exe
2000	mutated_30016.exe
1152	mutated_30016.exe
4568	mutated_30016.exe
3368	mutated_30016.exe
3804	mutated_30016.exe
3904	mutated_30016.exe
1772	mutated_30016.exe
4704	mutated_30016.exe
2072	mutated_30016.exe
4644	mutated_30016.exe
3324	mutated_25455.exe
3436	mutated_25455.exe
212	mutated_25455.exe
3120	mutated_25455.exe
2472	mutated_25455.exe
4636	mutated_25455.exe
552	mutated_25455.exe
5056	mutated_25455.exe
2852	mutated_25455.exe
5040	mutated_25455.exe
2424	mutated_25455.exe
4496	mutated_25455.exe
896	mutated_25455.exe
1680	mutated_25455.exe
2252	mutated_25455.exe
2964	mutated_16750.exe
4148	mutated_16750.exe
4716	mutated_16750.exe

System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_15201.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_5925.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_17766.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_17766.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_17766.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_10096.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_9090.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_29914.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_29914.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_18073.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_11099.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_21353.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_29710.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_22357.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_32109.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_20931.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_16750.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_19302.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_20727.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_29011.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_29608.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_30016.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_5995.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_6027.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_6129.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_21353.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_15201.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_30560.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_26458.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_29812.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_17753.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_32670.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_21033.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_23906.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_30560.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_13652.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_18073.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_19302.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_19302.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_5925.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_17753.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_9090.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_32670.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_22357.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_13652.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_6129.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_17971.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_20727.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_11744.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_16750.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_21353.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_4445.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_4445.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_21033.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_19302.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_17869.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_5925.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_17766.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_22357.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_26458.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_20727.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_22357.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mutated_11744.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4840 wrote to memory of 1904	4840	26ca6a675342db11ec3cf8fe124b61c0790fe46977c4d1f946fb0cba9ce49dd0.exe	82
PID 1904 wrote to memory of 2756	1904	mutated_27056.exe	83
PID 2756 wrote to memory of 4964	2756	mutated_27056.exe	84
PID 4964 wrote to memory of 3224	4964	mutated_27056.exe	85
PID 3224 wrote to memory of 1536	3224	mutated_27056.exe	86
PID 1536 wrote to memory of 2404	1536	mutated_27056.exe	87
PID 2404 wrote to memory of 3472	2404	mutated_27056.exe	88
PID 3472 wrote to memory of 4412	3472	mutated_27056.exe	89
PID 4412 wrote to memory of 2352	4412	mutated_27056.exe	90
PID 2352 wrote to memory of 396	2352	mutated_27056.exe	91
PID 396 wrote to memory of 3464	396	mutated_27056.exe	92
PID 3464 wrote to memory of 464	3464	mutated_27056.exe	93
PID 464 wrote to memory of 2296	464	mutated_27056.exe	94
PID 2296 wrote to memory of 2316	2296	mutated_10096.exe	95
PID 2316 wrote to memory of 2928	2316	mutated_10096.exe	96
PID 2928 wrote to memory of 1980	2928	mutated_10096.exe	97
PID 1980 wrote to memory of 2380	1980	mutated_10096.exe	98
PID 2380 wrote to memory of 712	2380	mutated_10096.exe	99
PID 712 wrote to memory of 4712	712	mutated_10096.exe	100
PID 4712 wrote to memory of 4748	4712	mutated_10096.exe	101
PID 4748 wrote to memory of 3808	4748	mutated_10096.exe	102
PID 3808 wrote to memory of 2524	3808	mutated_10096.exe	103
PID 2524 wrote to memory of 1312	2524	mutated_10096.exe	104
PID 1312 wrote to memory of 1272	1312	mutated_10096.exe	105
PID 1272 wrote to memory of 5116	1272	mutated_10096.exe	106
PID 5116 wrote to memory of 2116	5116	mutated_10096.exe	107
PID 2116 wrote to memory of 3812	2116	mutated_10096.exe	108
PID 3812 wrote to memory of 3896	3812	mutated_10096.exe	109
PID 3896 wrote to memory of 4244	3896	mutated_10096.exe	110
PID 4244 wrote to memory of 3932	4244	mutated_30016.exe	111
PID 3932 wrote to memory of 968	3932	mutated_30016.exe	112
PID 968 wrote to memory of 4600	968	mutated_30016.exe	113
PID 4600 wrote to memory of 1528	4600	mutated_30016.exe	114
PID 1528 wrote to memory of 4116	1528	mutated_30016.exe	115
PID 4116 wrote to memory of 1928	4116	mutated_30016.exe	116
PID 1928 wrote to memory of 4992	1928	mutated_30016.exe	117
PID 4992 wrote to memory of 2000	4992	mutated_30016.exe	118
PID 2000 wrote to memory of 1152	2000	mutated_30016.exe	119
PID 1152 wrote to memory of 4568	1152	mutated_30016.exe	120
PID 4568 wrote to memory of 3368	4568	mutated_30016.exe	121
PID 3368 wrote to memory of 3804	3368	mutated_30016.exe	122
PID 3804 wrote to memory of 3904	3804	mutated_30016.exe	123
PID 3904 wrote to memory of 1772	3904	mutated_30016.exe	124
PID 1772 wrote to memory of 4704	1772	mutated_30016.exe	125
PID 4704 wrote to memory of 2072	4704	mutated_30016.exe	126
PID 2072 wrote to memory of 4644	2072	mutated_30016.exe	127
PID 4644 wrote to memory of 3324	4644	mutated_30016.exe	128
PID 3324 wrote to memory of 3436	3324	mutated_25455.exe	129
PID 3436 wrote to memory of 212	3436	mutated_25455.exe	130
PID 212 wrote to memory of 3120	212	mutated_25455.exe	131
PID 3120 wrote to memory of 2472	3120	mutated_25455.exe	132
PID 2472 wrote to memory of 4636	2472	mutated_25455.exe	133
PID 4636 wrote to memory of 552	4636	mutated_25455.exe	134
PID 552 wrote to memory of 5056	552	mutated_25455.exe	135
PID 5056 wrote to memory of 2852	5056	mutated_25455.exe	136
PID 2852 wrote to memory of 5040	2852	mutated_25455.exe	137
PID 5040 wrote to memory of 2424	5040	mutated_25455.exe	138
PID 2424 wrote to memory of 4496	2424	mutated_25455.exe	139
PID 4496 wrote to memory of 896	4496	mutated_25455.exe	140
PID 896 wrote to memory of 1680	896	mutated_25455.exe	141
PID 1680 wrote to memory of 2252	1680	mutated_25455.exe	142
PID 2252 wrote to memory of 2964	2252	mutated_25455.exe	143
PID 2964 wrote to memory of 4148	2964	mutated_16750.exe	144
PID 4148 wrote to memory of 4716	4148	mutated_16750.exe	145

C:\Users\Admin\AppData\Local\Temp\26ca6a675342db11ec3cf8fe124b61c0790fe46977c4d1f946fb0cba9ce49dd0.exe
"C:\Users\Admin\AppData\Local\Temp\26ca6a675342db11ec3cf8fe124b61c0790fe46977c4d1f946fb0cba9ce49dd0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4840
- C:\Users\Admin\AppData\Local\Temp\mutated_27056.exe
  "mutated_27056.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:1904
- - C:\Users\Admin\AppData\Local\Temp\mutated_27056.exe
    "mutated_27056.exe"
    3⤵
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:2756
  - - C:\Users\Admin\AppData\Local\Temp\mutated_27056.exe
      "mutated_27056.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of WriteProcessMemory
      PID:4964
    - - C:\Users\Admin\AppData\Local\Temp\mutated_27056.exe
        
        "mutated_27056.exe"
        5⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3224
      - C:\Users\Admin\AppData\Local\Temp\mutated_27056.exe
        
        "mutated_27056.exe"
        6⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1536
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27056.exe
        
        "mutated_27056.exe"
        7⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2404
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27056.exe
        
        "mutated_27056.exe"
        8⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3472
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27056.exe
        
        "mutated_27056.exe"
        9⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4412
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27056.exe
        
        "mutated_27056.exe"
        10⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2352
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27056.exe
        
        "mutated_27056.exe"
        11⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:396
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27056.exe
        
        "mutated_27056.exe"
        12⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3464
        
        C:\Users\Admin\AppData\Local\Temp\mutated_27056.exe
        
        "mutated_27056.exe"
        13⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:464
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10096.exe
        
        "mutated_10096.exe"
        14⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2296
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10096.exe
        
        "mutated_10096.exe"
        15⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2316
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10096.exe
        
        "mutated_10096.exe"
        16⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2928
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10096.exe
        
        "mutated_10096.exe"
        17⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1980
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10096.exe
        
        "mutated_10096.exe"
        18⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2380
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10096.exe
        
        "mutated_10096.exe"
        19⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:712
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10096.exe
        
        "mutated_10096.exe"
        20⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4712
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10096.exe
        
        "mutated_10096.exe"
        21⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4748
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10096.exe
        
        "mutated_10096.exe"
        22⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3808
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10096.exe
        
        "mutated_10096.exe"
        23⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2524
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10096.exe
        
        "mutated_10096.exe"
        24⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1312
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10096.exe
        
        "mutated_10096.exe"
        25⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1272
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10096.exe
        
        "mutated_10096.exe"
        26⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5116
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10096.exe
        
        "mutated_10096.exe"
        27⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2116
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10096.exe
        
        "mutated_10096.exe"
        28⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3812
        
        C:\Users\Admin\AppData\Local\Temp\mutated_10096.exe
        
        "mutated_10096.exe"
        29⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3896
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30016.exe
        
        "mutated_30016.exe"
        30⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4244
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30016.exe
        
        "mutated_30016.exe"
        31⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3932
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30016.exe
        
        "mutated_30016.exe"
        32⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:968
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30016.exe
        
        "mutated_30016.exe"
        33⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4600
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30016.exe
        
        "mutated_30016.exe"
        34⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1528
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30016.exe
        
        "mutated_30016.exe"
        35⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4116
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30016.exe
        
        "mutated_30016.exe"
        36⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1928
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30016.exe
        
        "mutated_30016.exe"
        37⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4992
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30016.exe
        
        "mutated_30016.exe"
        38⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2000
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30016.exe
        
        "mutated_30016.exe"
        39⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1152
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30016.exe
        
        "mutated_30016.exe"
        40⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4568
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30016.exe
        
        "mutated_30016.exe"
        41⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3368
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30016.exe
        
        "mutated_30016.exe"
        42⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3804
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30016.exe
        
        "mutated_30016.exe"
        43⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3904
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30016.exe
        
        "mutated_30016.exe"
        44⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1772
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30016.exe
        
        "mutated_30016.exe"
        45⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4704
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30016.exe
        
        "mutated_30016.exe"
        46⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2072
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30016.exe
        
        "mutated_30016.exe"
        47⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4644
        
        C:\Users\Admin\AppData\Local\Temp\mutated_25455.exe
        
        "mutated_25455.exe"
        48⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3324
        
        C:\Users\Admin\AppData\Local\Temp\mutated_25455.exe
        
        "mutated_25455.exe"
        49⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3436
        
        C:\Users\Admin\AppData\Local\Temp\mutated_25455.exe
        
        "mutated_25455.exe"
        50⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:212
        
        C:\Users\Admin\AppData\Local\Temp\mutated_25455.exe
        
        "mutated_25455.exe"
        51⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3120
        
        C:\Users\Admin\AppData\Local\Temp\mutated_25455.exe
        
        "mutated_25455.exe"
        52⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2472
        
        C:\Users\Admin\AppData\Local\Temp\mutated_25455.exe
        
        "mutated_25455.exe"
        53⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4636
        
        C:\Users\Admin\AppData\Local\Temp\mutated_25455.exe
        
        "mutated_25455.exe"
        54⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:552
        
        C:\Users\Admin\AppData\Local\Temp\mutated_25455.exe
        
        "mutated_25455.exe"
        55⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5056
        
        C:\Users\Admin\AppData\Local\Temp\mutated_25455.exe
        
        "mutated_25455.exe"
        56⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2852
        
        C:\Users\Admin\AppData\Local\Temp\mutated_25455.exe
        
        "mutated_25455.exe"
        57⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5040
        
        C:\Users\Admin\AppData\Local\Temp\mutated_25455.exe
        
        "mutated_25455.exe"
        58⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2424
        
        C:\Users\Admin\AppData\Local\Temp\mutated_25455.exe
        
        "mutated_25455.exe"
        59⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4496
        
        C:\Users\Admin\AppData\Local\Temp\mutated_25455.exe
        
        "mutated_25455.exe"
        60⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:896
        
        C:\Users\Admin\AppData\Local\Temp\mutated_25455.exe
        
        "mutated_25455.exe"
        61⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1680
        
        C:\Users\Admin\AppData\Local\Temp\mutated_25455.exe
        
        "mutated_25455.exe"
        62⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2252
        
        C:\Users\Admin\AppData\Local\Temp\mutated_16750.exe
        
        "mutated_16750.exe"
        63⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:2964
        
        C:\Users\Admin\AppData\Local\Temp\mutated_16750.exe
        
        "mutated_16750.exe"
        64⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4148
        
        C:\Users\Admin\AppData\Local\Temp\mutated_16750.exe
        
        "mutated_16750.exe"
        65⤵
        Executes dropped EXE
        
        PID:4716
        
        C:\Users\Admin\AppData\Local\Temp\mutated_16750.exe
        
        "mutated_16750.exe"
        66⤵
        
        PID:2376
        
        C:\Users\Admin\AppData\Local\Temp\mutated_16750.exe
        
        "mutated_16750.exe"
        67⤵
        
        PID:4664
        
        C:\Users\Admin\AppData\Local\Temp\mutated_16750.exe
        
        "mutated_16750.exe"
        68⤵
        
        PID:4144
        
        C:\Users\Admin\AppData\Local\Temp\mutated_16750.exe
        
        "mutated_16750.exe"
        69⤵
        
        PID:1960
        
        C:\Users\Admin\AppData\Local\Temp\mutated_16750.exe
        
        "mutated_16750.exe"
        70⤵
        
        PID:4324
        
        C:\Users\Admin\AppData\Local\Temp\mutated_16750.exe
        
        "mutated_16750.exe"
        71⤵
        
        PID:928
        
        C:\Users\Admin\AppData\Local\Temp\mutated_16750.exe
        
        "mutated_16750.exe"
        72⤵
        
        PID:3688
        
        C:\Users\Admin\AppData\Local\Temp\mutated_16750.exe
        
        "mutated_16750.exe"
        73⤵
        
        PID:1236
        
        C:\Users\Admin\AppData\Local\Temp\mutated_16750.exe
        
        "mutated_16750.exe"
        74⤵
        
        PID:2372
        
        C:\Users\Admin\AppData\Local\Temp\mutated_16750.exe
        
        "mutated_16750.exe"
        75⤵
        
        PID:4700
        
        C:\Users\Admin\AppData\Local\Temp\mutated_16750.exe
        
        "mutated_16750.exe"
        76⤵
        
        PID:2280
        
        C:\Users\Admin\AppData\Local\Temp\mutated_16750.exe
        
        "mutated_16750.exe"
        77⤵
        
        PID:4368
        
        C:\Users\Admin\AppData\Local\Temp\mutated_16750.exe
        
        "mutated_16750.exe"
        78⤵
        System Location Discovery: System Language Discovery
        
        PID:3488
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18073.exe
        
        "mutated_18073.exe"
        79⤵
        
        PID:2284
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18073.exe
        
        "mutated_18073.exe"
        80⤵
        
        PID:4580
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18073.exe
        
        "mutated_18073.exe"
        81⤵
        
        PID:1856
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18073.exe
        
        "mutated_18073.exe"
        82⤵
        
        PID:1784
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18073.exe
        
        "mutated_18073.exe"
        83⤵
        
        PID:2348
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18073.exe
        
        "mutated_18073.exe"
        84⤵
        
        PID:564
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18073.exe
        
        "mutated_18073.exe"
        85⤵
        
        PID:4272
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18073.exe
        
        "mutated_18073.exe"
        86⤵
        
        PID:892
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18073.exe
        
        "mutated_18073.exe"
        87⤵
        
        PID:528
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18073.exe
        
        "mutated_18073.exe"
        88⤵
        
        PID:3748
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18073.exe
        
        "mutated_18073.exe"
        89⤵
        System Location Discovery: System Language Discovery
        
        PID:2676
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18073.exe
        
        "mutated_18073.exe"
        90⤵
        System Location Discovery: System Language Discovery
        
        PID:2084
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18073.exe
        
        "mutated_18073.exe"
        91⤵
        
        PID:4860
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18073.exe
        
        "mutated_18073.exe"
        92⤵
        
        PID:3764
        
        C:\Users\Admin\AppData\Local\Temp\mutated_18073.exe
        
        "mutated_18073.exe"
        93⤵
        
        PID:2596
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32109.exe
        
        "mutated_32109.exe"
        94⤵
        
        PID:4472
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32109.exe
        
        "mutated_32109.exe"
        95⤵
        
        PID:1688
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32109.exe
        
        "mutated_32109.exe"
        96⤵
        
        PID:2204
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32109.exe
        
        "mutated_32109.exe"
        97⤵
        
        PID:3296
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32109.exe
        
        "mutated_32109.exe"
        98⤵
        System Location Discovery: System Language Discovery
        
        PID:3740
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32109.exe
        
        "mutated_32109.exe"
        99⤵
        
        PID:360
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32109.exe
        
        "mutated_32109.exe"
        100⤵
        
        PID:1560
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32109.exe
        
        "mutated_32109.exe"
        101⤵
        
        PID:4176
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32109.exe
        
        "mutated_32109.exe"
        102⤵
        
        PID:4944
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32109.exe
        
        "mutated_32109.exe"
        103⤵
        
        PID:4088
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32109.exe
        
        "mutated_32109.exe"
        104⤵
        
        PID:2324
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32109.exe
        
        "mutated_32109.exe"
        105⤵
        
        PID:5020
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32109.exe
        
        "mutated_32109.exe"
        106⤵
        
        PID:1020
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32109.exe
        
        "mutated_32109.exe"
        107⤵
        
        PID:4680
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32109.exe
        
        "mutated_32109.exe"
        108⤵
        
        PID:1872
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32109.exe
        
        "mutated_32109.exe"
        109⤵
        
        PID:4220
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32109.exe
        
        "mutated_32109.exe"
        110⤵
        
        PID:988
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32109.exe
        
        "mutated_32109.exe"
        111⤵
        
        PID:1068
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32109.exe
        
        "mutated_32109.exe"
        112⤵
        
        PID:4252
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21033.exe
        
        "mutated_21033.exe"
        113⤵
        
        PID:1800
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21033.exe
        
        "mutated_21033.exe"
        114⤵
        
        PID:1212
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21033.exe
        
        "mutated_21033.exe"
        115⤵
        
        PID:3124
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21033.exe
        
        "mutated_21033.exe"
        116⤵
        
        PID:404
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21033.exe
        
        "mutated_21033.exe"
        117⤵
        
        PID:1596
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21033.exe
        
        "mutated_21033.exe"
        118⤵
        
        PID:3036
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21033.exe
        
        "mutated_21033.exe"
        119⤵
        System Location Discovery: System Language Discovery
        
        PID:1280
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21033.exe
        
        "mutated_21033.exe"
        120⤵
        
        PID:3524
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21033.exe
        
        "mutated_21033.exe"
        121⤵
        
        PID:456
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21033.exe
        
        "mutated_21033.exe"
        122⤵
        
        PID:652
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21033.exe
        
        "mutated_21033.exe"
        123⤵
        System Location Discovery: System Language Discovery
        
        PID:2500
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21033.exe
        
        "mutated_21033.exe"
        124⤵
        
        PID:3300
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21033.exe
        
        "mutated_21033.exe"
        125⤵
        
        PID:3684
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21033.exe
        
        "mutated_21033.exe"
        126⤵
        
        PID:1360
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6129.exe
        
        "mutated_6129.exe"
        127⤵
        System Location Discovery: System Language Discovery
        
        PID:1664
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6129.exe
        
        "mutated_6129.exe"
        128⤵
        
        PID:3752
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6129.exe
        
        "mutated_6129.exe"
        129⤵
        
        PID:680
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6129.exe
        
        "mutated_6129.exe"
        130⤵
        
        PID:3712
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6129.exe
        
        "mutated_6129.exe"
        131⤵
        
        PID:1976
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6129.exe
        
        "mutated_6129.exe"
        132⤵
        
        PID:1712
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6129.exe
        
        "mutated_6129.exe"
        133⤵
        
        PID:452
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6129.exe
        
        "mutated_6129.exe"
        134⤵
        
        PID:2292
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6129.exe
        
        "mutated_6129.exe"
        135⤵
        System Location Discovery: System Language Discovery
        
        PID:4372
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6129.exe
        
        "mutated_6129.exe"
        136⤵
        
        PID:500
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6129.exe
        
        "mutated_6129.exe"
        137⤵
        
        PID:3180
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6129.exe
        
        "mutated_6129.exe"
        138⤵
        
        PID:2220
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6129.exe
        
        "mutated_6129.exe"
        139⤵
        
        PID:2264
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6129.exe
        
        "mutated_6129.exe"
        140⤵
        
        PID:5064
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6129.exe
        
        "mutated_6129.exe"
        141⤵
        
        PID:3260
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6129.exe
        
        "mutated_6129.exe"
        142⤵
        
        PID:3768
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6129.exe
        
        "mutated_6129.exe"
        143⤵
        
        PID:1244
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6129.exe
        
        "mutated_6129.exe"
        144⤵
        
        PID:4736
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        145⤵
        
        PID:2452
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        146⤵
        
        PID:3280
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        147⤵
        
        PID:3612
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        148⤵
        System Location Discovery: System Language Discovery
        
        PID:2040
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        149⤵
        
        PID:1948
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        150⤵
        
        PID:3004
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        151⤵
        
        PID:1728
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        152⤵
        
        PID:1488
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        153⤵
        
        PID:4864
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        154⤵
        
        PID:2864
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        155⤵
        
        PID:2308
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        156⤵
        
        PID:2388
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        157⤵
        
        PID:3268
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        158⤵
        
        PID:3856
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        159⤵
        
        PID:4048
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        160⤵
        
        PID:2328
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        161⤵
        
        PID:4908
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        162⤵
        
        PID:1468
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        163⤵
        
        PID:3540
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        164⤵
        
        PID:1876
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5995.exe
        
        "mutated_5995.exe"
        165⤵
        
        PID:3332
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9090.exe
        
        "mutated_9090.exe"
        166⤵
        
        PID:4356
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9090.exe
        
        "mutated_9090.exe"
        167⤵
        System Location Discovery: System Language Discovery
        
        PID:3200
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9090.exe
        
        "mutated_9090.exe"
        168⤵
        
        PID:4196
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9090.exe
        
        "mutated_9090.exe"
        169⤵
        
        PID:2304
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9090.exe
        
        "mutated_9090.exe"
        170⤵
        
        PID:4952
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9090.exe
        
        "mutated_9090.exe"
        171⤵
        
        PID:1072
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9090.exe
        
        "mutated_9090.exe"
        172⤵
        
        PID:3432
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9090.exe
        
        "mutated_9090.exe"
        173⤵
        
        PID:976
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9090.exe
        
        "mutated_9090.exe"
        174⤵
        
        PID:2212
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9090.exe
        
        "mutated_9090.exe"
        175⤵
        
        PID:4184
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9090.exe
        
        "mutated_9090.exe"
        176⤵
        
        PID:4856
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9090.exe
        
        "mutated_9090.exe"
        177⤵
        
        PID:4268
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9090.exe
        
        "mutated_9090.exe"
        178⤵
        
        PID:4744
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9090.exe
        
        "mutated_9090.exe"
        179⤵
        System Location Discovery: System Language Discovery
        
        PID:1748
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9090.exe
        
        "mutated_9090.exe"
        180⤵
        
        PID:4380
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9090.exe
        
        "mutated_9090.exe"
        181⤵
        
        PID:3236
        
        C:\Users\Admin\AppData\Local\Temp\mutated_9090.exe
        
        "mutated_9090.exe"
        182⤵
        
        PID:1720
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21353.exe
        
        "mutated_21353.exe"
        183⤵
        
        PID:1628
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21353.exe
        
        "mutated_21353.exe"
        184⤵
        
        PID:3664
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21353.exe
        
        "mutated_21353.exe"
        185⤵
        
        PID:1828
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21353.exe
        
        "mutated_21353.exe"
        186⤵
        
        PID:488
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21353.exe
        
        "mutated_21353.exe"
        187⤵
        
        PID:4532
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21353.exe
        
        "mutated_21353.exe"
        188⤵
        
        PID:3708
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21353.exe
        
        "mutated_21353.exe"
        189⤵
        
        PID:2628
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21353.exe
        
        "mutated_21353.exe"
        190⤵
        System Location Discovery: System Language Discovery
        
        PID:1832
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21353.exe
        
        "mutated_21353.exe"
        191⤵
        
        PID:1368
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21353.exe
        
        "mutated_21353.exe"
        192⤵
        
        PID:916
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21353.exe
        
        "mutated_21353.exe"
        193⤵
        
        PID:2444
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21353.exe
        
        "mutated_21353.exe"
        194⤵
        System Location Discovery: System Language Discovery
        
        PID:1852
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21353.exe
        
        "mutated_21353.exe"
        195⤵
        
        PID:1972
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21353.exe
        
        "mutated_21353.exe"
        196⤵
        
        PID:216
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21353.exe
        
        "mutated_21353.exe"
        197⤵
        
        PID:4504
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21353.exe
        
        "mutated_21353.exe"
        198⤵
        
        PID:4548
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21353.exe
        
        "mutated_21353.exe"
        199⤵
        
        PID:4284
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21353.exe
        
        "mutated_21353.exe"
        200⤵
        
        PID:3728
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21353.exe
        
        "mutated_21353.exe"
        201⤵
        
        PID:4044
        
        C:\Users\Admin\AppData\Local\Temp\mutated_21353.exe
        
        "mutated_21353.exe"
        202⤵
        System Location Discovery: System Language Discovery
        
        PID:3372
        
        C:\Users\Admin\AppData\Local\Temp\mutated_12648.exe
        
        "mutated_12648.exe"
        203⤵
        
        PID:2632
        
        C:\Users\Admin\AppData\Local\Temp\mutated_12648.exe
        
        "mutated_12648.exe"
        204⤵
        
        PID:1820
        
        C:\Users\Admin\AppData\Local\Temp\mutated_12648.exe
        
        "mutated_12648.exe"
        205⤵
        
        PID:1636
        
        C:\Users\Admin\AppData\Local\Temp\mutated_12648.exe
        
        "mutated_12648.exe"
        206⤵
        
        PID:3508
        
        C:\Users\Admin\AppData\Local\Temp\mutated_12648.exe
        
        "mutated_12648.exe"
        207⤵
        
        PID:4912
        
        C:\Users\Admin\AppData\Local\Temp\mutated_12648.exe
        
        "mutated_12648.exe"
        208⤵
        
        PID:3872
        
        C:\Users\Admin\AppData\Local\Temp\mutated_12648.exe
        
        "mutated_12648.exe"
        209⤵
        
        PID:3148
        
        C:\Users\Admin\AppData\Local\Temp\mutated_12648.exe
        
        "mutated_12648.exe"
        210⤵
        
        PID:4936
        
        C:\Users\Admin\AppData\Local\Temp\mutated_12648.exe
        
        "mutated_12648.exe"
        211⤵
        
        PID:4032
        
        C:\Users\Admin\AppData\Local\Temp\mutated_12648.exe
        
        "mutated_12648.exe"
        212⤵
        
        PID:2732
        
        C:\Users\Admin\AppData\Local\Temp\mutated_12648.exe
        
        "mutated_12648.exe"
        213⤵
        
        PID:5052
        
        C:\Users\Admin\AppData\Local\Temp\mutated_12648.exe
        
        "mutated_12648.exe"
        214⤵
        
        PID:848
        
        C:\Users\Admin\AppData\Local\Temp\mutated_12648.exe
        
        "mutated_12648.exe"
        215⤵
        
        PID:3676
        
        C:\Users\Admin\AppData\Local\Temp\mutated_12648.exe
        
        "mutated_12648.exe"
        216⤵
        
        PID:3568
        
        C:\Users\Admin\AppData\Local\Temp\mutated_12648.exe
        
        "mutated_12648.exe"
        217⤵
        
        PID:4008
        
        C:\Users\Admin\AppData\Local\Temp\mutated_12648.exe
        
        "mutated_12648.exe"
        218⤵
        
        PID:4480
        
        C:\Users\Admin\AppData\Local\Temp\mutated_12648.exe
        
        "mutated_12648.exe"
        219⤵
        
        PID:3352
        
        C:\Users\Admin\AppData\Local\Temp\mutated_12648.exe
        
        "mutated_12648.exe"
        220⤵
        
        PID:4940
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29914.exe
        
        "mutated_29914.exe"
        221⤵
        
        PID:2504
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29914.exe
        
        "mutated_29914.exe"
        222⤵
        
        PID:4264
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29914.exe
        
        "mutated_29914.exe"
        223⤵
        System Location Discovery: System Language Discovery
        
        PID:876
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29914.exe
        
        "mutated_29914.exe"
        224⤵
        
        PID:1592
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29914.exe
        
        "mutated_29914.exe"
        225⤵
        
        PID:1652
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29914.exe
        
        "mutated_29914.exe"
        226⤵
        
        PID:2648
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29914.exe
        
        "mutated_29914.exe"
        227⤵
        
        PID:3964
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29914.exe
        
        "mutated_29914.exe"
        228⤵
        
        PID:3220
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29914.exe
        
        "mutated_29914.exe"
        229⤵
        
        PID:3660
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29914.exe
        
        "mutated_29914.exe"
        230⤵
        
        PID:4084
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29914.exe
        
        "mutated_29914.exe"
        231⤵
        
        PID:1364
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29914.exe
        
        "mutated_29914.exe"
        232⤵
        
        PID:3796
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29914.exe
        
        "mutated_29914.exe"
        233⤵
        
        PID:3816
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29914.exe
        
        "mutated_29914.exe"
        234⤵
        
        PID:2924
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29914.exe
        
        "mutated_29914.exe"
        235⤵
        
        PID:2636
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29914.exe
        
        "mutated_29914.exe"
        236⤵
        
        PID:3892
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29914.exe
        
        "mutated_29914.exe"
        237⤵
        System Location Discovery: System Language Discovery
        
        PID:2368
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29914.exe
        
        "mutated_29914.exe"
        238⤵
        
        PID:1124
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29914.exe
        
        "mutated_29914.exe"
        239⤵
        
        PID:2476
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29914.exe
        
        "mutated_29914.exe"
        240⤵
        
        PID:1128
        
        C:\Users\Admin\AppData\Local\Temp\mutated_28007.exe
        
        "mutated_28007.exe"
        241⤵
        
        PID:5000
        
        C:\Users\Admin\AppData\Local\Temp\mutated_28007.exe
        
        "mutated_28007.exe"
        242⤵
        
        PID:4308
        
        C:\Users\Admin\AppData\Local\Temp\mutated_28007.exe
        
        "mutated_28007.exe"
        243⤵
        
        PID:4300
        
        C:\Users\Admin\AppData\Local\Temp\mutated_28007.exe
        
        "mutated_28007.exe"
        244⤵
        
        PID:1300
        
        C:\Users\Admin\AppData\Local\Temp\mutated_28007.exe
        
        "mutated_28007.exe"
        245⤵
        
        PID:3544
        
        C:\Users\Admin\AppData\Local\Temp\mutated_28007.exe
        
        "mutated_28007.exe"
        246⤵
        
        PID:1016
        
        C:\Users\Admin\AppData\Local\Temp\mutated_28007.exe
        
        "mutated_28007.exe"
        247⤵
        
        PID:3936
        
        C:\Users\Admin\AppData\Local\Temp\mutated_28007.exe
        
        "mutated_28007.exe"
        248⤵
        
        PID:2768
        
        C:\Users\Admin\AppData\Local\Temp\mutated_28007.exe
        
        "mutated_28007.exe"
        249⤵
        
        PID:1920
        
        C:\Users\Admin\AppData\Local\Temp\mutated_28007.exe
        
        "mutated_28007.exe"
        250⤵
        
        PID:3484
        
        C:\Users\Admin\AppData\Local\Temp\mutated_28007.exe
        
        "mutated_28007.exe"
        251⤵
        
        PID:964
        
        C:\Users\Admin\AppData\Local\Temp\mutated_28007.exe
        
        "mutated_28007.exe"
        252⤵
        
        PID:4456
        
        C:\Users\Admin\AppData\Local\Temp\mutated_28007.exe
        
        "mutated_28007.exe"
        253⤵
        
        PID:4200
        
        C:\Users\Admin\AppData\Local\Temp\mutated_28007.exe
        
        "mutated_28007.exe"
        254⤵
        
        PID:4152
        
        C:\Users\Admin\AppData\Local\Temp\mutated_28007.exe
        
        "mutated_28007.exe"
        255⤵
        
        PID:2148
        
        C:\Users\Admin\AppData\Local\Temp\mutated_28007.exe
        
        "mutated_28007.exe"
        256⤵
        
        PID:1888
        
        C:\Users\Admin\AppData\Local\Temp\mutated_28007.exe
        
        "mutated_28007.exe"
        257⤵
        
        PID:3924
        
        C:\Users\Admin\AppData\Local\Temp\mutated_28007.exe
        
        "mutated_28007.exe"
        258⤵
        
        PID:3244
        
        C:\Users\Admin\AppData\Local\Temp\mutated_28007.exe
        
        "mutated_28007.exe"
        259⤵
        
        PID:2228
        
        C:\Users\Admin\AppData\Local\Temp\mutated_28007.exe
        
        "mutated_28007.exe"
        260⤵
        
        PID:5060
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        261⤵
        
        PID:4428
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        262⤵
        
        PID:1052
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        263⤵
        
        PID:1120
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        264⤵
        
        PID:1256
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        265⤵
        
        PID:1508
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        266⤵
        
        PID:3308
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        267⤵
        
        PID:4188
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        268⤵
        
        PID:3984
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        269⤵
        
        PID:4756
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        270⤵
        
        PID:4280
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        271⤵
        System Location Discovery: System Language Discovery
        
        PID:4916
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        272⤵
        
        PID:2684
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        273⤵
        
        PID:4292
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        274⤵
        System Location Discovery: System Language Discovery
        
        PID:4352
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        275⤵
        
        PID:5048
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        276⤵
        
        PID:4136
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        277⤵
        
        PID:4976
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        278⤵
        
        PID:2996
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        279⤵
        System Location Discovery: System Language Discovery
        
        PID:2796
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        280⤵
        
        PID:1480
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        281⤵
        
        PID:1916
        
        C:\Users\Admin\AppData\Local\Temp\mutated_19302.exe
        
        "mutated_19302.exe"
        282⤵
        System Location Discovery: System Language Discovery
        
        PID:2236
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17971.exe
        
        "mutated_17971.exe"
        283⤵
        
        PID:4164
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17971.exe
        
        "mutated_17971.exe"
        284⤵
        
        PID:2644
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17971.exe
        
        "mutated_17971.exe"
        285⤵
        
        PID:4364
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17971.exe
        
        "mutated_17971.exe"
        286⤵
        
        PID:4540
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17971.exe
        
        "mutated_17971.exe"
        287⤵
        
        PID:3428
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17971.exe
        
        "mutated_17971.exe"
        288⤵
        
        PID:4320
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17971.exe
        
        "mutated_17971.exe"
        289⤵
        
        PID:4344
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17971.exe
        
        "mutated_17971.exe"
        290⤵
        
        PID:3160
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17971.exe
        
        "mutated_17971.exe"
        291⤵
        System Location Discovery: System Language Discovery
        
        PID:2588
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17971.exe
        
        "mutated_17971.exe"
        292⤵
        
        PID:3132
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17971.exe
        
        "mutated_17971.exe"
        293⤵
        
        PID:1700
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17971.exe
        
        "mutated_17971.exe"
        294⤵
        
        PID:4876
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17971.exe
        
        "mutated_17971.exe"
        295⤵
        
        PID:840
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17971.exe
        
        "mutated_17971.exe"
        296⤵
        
        PID:3452
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17971.exe
        
        "mutated_17971.exe"
        297⤵
        
        PID:4468
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17971.exe
        
        "mutated_17971.exe"
        298⤵
        
        PID:2812
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17971.exe
        
        "mutated_17971.exe"
        299⤵
        
        PID:2984
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17971.exe
        
        "mutated_17971.exe"
        300⤵
        
        PID:496
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17971.exe
        
        "mutated_17971.exe"
        301⤵
        
        PID:3156
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17971.exe
        
        "mutated_17971.exe"
        302⤵
        
        PID:1812
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        303⤵
        
        PID:3192
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        304⤵
        
        PID:624
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        305⤵
        
        PID:2412
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        306⤵
        
        PID:1756
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        307⤵
        
        PID:4180
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        308⤵
        
        PID:4328
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        309⤵
        
        PID:3988
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        310⤵
        
        PID:1064
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        311⤵
        
        PID:4972
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        312⤵
        
        PID:4556
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        313⤵
        
        PID:2068
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        314⤵
        
        PID:3780
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        315⤵
        
        PID:3700
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        316⤵
        
        PID:436
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        317⤵
        
        PID:4544
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        318⤵
        
        PID:2620
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        319⤵
        
        PID:4828
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        320⤵
        
        PID:560
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        321⤵
        
        PID:1884
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        322⤵
        
        PID:3992
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        323⤵
        
        PID:2408
        
        C:\Users\Admin\AppData\Local\Temp\mutated_1893.exe
        
        "mutated_1893.exe"
        324⤵
        
        PID:1044
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        325⤵
        
        PID:2004
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        326⤵
        
        PID:4028
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        327⤵
        
        PID:3328
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        328⤵
        
        PID:4632
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        329⤵
        
        PID:4884
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        330⤵
        
        PID:4076
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        331⤵
        
        PID:1776
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        332⤵
        
        PID:3356
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        333⤵
        
        PID:388
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        334⤵
        System Location Discovery: System Language Discovery
        
        PID:2392
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        335⤵
        
        PID:4852
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        336⤵
        
        PID:4348
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        337⤵
        
        PID:1264
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        338⤵
        
        PID:780
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        339⤵
        
        PID:4304
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        340⤵
        
        PID:4924
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        341⤵
        
        PID:2572
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        342⤵
        
        PID:3956
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        343⤵
        
        PID:3616
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        344⤵
        
        PID:3032
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20931.exe
        
        "mutated_20931.exe"
        345⤵
        
        PID:3716
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        346⤵
        
        PID:4628
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        347⤵
        
        PID:568
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        348⤵
        
        PID:4316
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        349⤵
        
        PID:2400
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        350⤵
        
        PID:2780
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        351⤵
        
        PID:1716
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        352⤵
        
        PID:4980
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        353⤵
        System Location Discovery: System Language Discovery
        
        PID:2420
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        354⤵
        
        PID:4888
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        355⤵
        
        PID:3944
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        356⤵
        
        PID:1000
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        357⤵
        
        PID:4836
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        358⤵
        
        PID:224
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        359⤵
        
        PID:4256
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        360⤵
        
        PID:5132
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        361⤵
        
        PID:5148
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        362⤵
        
        PID:5164
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        363⤵
        
        PID:5180
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        364⤵
        
        PID:5196
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        365⤵
        
        PID:5212
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6027.exe
        
        "mutated_6027.exe"
        366⤵
        
        PID:5228
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        367⤵
        
        PID:5248
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        368⤵
        
        PID:5272
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        369⤵
        
        PID:5284
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        370⤵
        
        PID:5300
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        371⤵
        
        PID:5316
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        372⤵
        
        PID:5332
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        373⤵
        
        PID:5348
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        374⤵
        
        PID:5364
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        375⤵
        
        PID:5380
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        376⤵
        
        PID:5396
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        377⤵
        
        PID:5412
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        378⤵
        
        PID:5428
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        379⤵
        
        PID:5444
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        380⤵
        
        PID:5460
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        381⤵
        
        PID:5476
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        382⤵
        
        PID:5492
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        383⤵
        
        PID:5508
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        384⤵
        
        PID:5524
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        385⤵
        
        PID:5540
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        386⤵
        
        PID:5556
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        387⤵
        
        PID:5572
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        388⤵
        
        PID:5588
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8547.exe
        
        "mutated_8547.exe"
        389⤵
        
        PID:5604
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        390⤵
        
        PID:5624
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        391⤵
        
        PID:5648
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        392⤵
        
        PID:5660
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        393⤵
        
        PID:5676
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        394⤵
        
        PID:5692
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        395⤵
        
        PID:5708
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        396⤵
        
        PID:5724
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        397⤵
        
        PID:5740
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        398⤵
        
        PID:5756
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        399⤵
        
        PID:5772
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        400⤵
        
        PID:5788
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        401⤵
        
        PID:5804
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        402⤵
        
        PID:5820
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        403⤵
        
        PID:5836
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        404⤵
        
        PID:5852
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        405⤵
        
        PID:5868
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        406⤵
        
        PID:5884
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        407⤵
        
        PID:5900
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        408⤵
        
        PID:5916
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        409⤵
        
        PID:5932
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8987.exe
        
        "mutated_8987.exe"
        410⤵
        
        PID:5948
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        411⤵
        
        PID:5968
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        412⤵
        
        PID:5992
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        413⤵
        
        PID:6004
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        414⤵
        
        PID:6020
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        415⤵
        
        PID:6036
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        416⤵
        
        PID:6052
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        417⤵
        System Location Discovery: System Language Discovery
        
        PID:6068
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        418⤵
        
        PID:6084
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        419⤵
        
        PID:6100
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        420⤵
        
        PID:6116
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        421⤵
        
        PID:6132
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        422⤵
        
        PID:4808
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        423⤵
        
        PID:1668
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        424⤵
        
        PID:2692
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        425⤵
        
        PID:3848
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        426⤵
        
        PID:656
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        427⤵
        
        PID:5168
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        428⤵
        
        PID:5192
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        429⤵
        
        PID:3480
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        430⤵
        
        PID:2080
        
        C:\Users\Admin\AppData\Local\Temp\mutated_23906.exe
        
        "mutated_23906.exe"
        431⤵
        
        PID:5240
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        432⤵
        
        PID:5280
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        433⤵
        
        PID:5312
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        434⤵
        System Location Discovery: System Language Discovery
        
        PID:5328
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        435⤵
        
        PID:5352
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        436⤵
        
        PID:5376
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        437⤵
        
        PID:1940
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        438⤵
        
        PID:5416
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        439⤵
        
        PID:5440
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        440⤵
        
        PID:636
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        441⤵
        
        PID:5480
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        442⤵
        
        PID:5504
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        443⤵
        
        PID:5172
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        444⤵
        
        PID:5544
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        445⤵
        
        PID:5204
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        446⤵
        
        PID:5592
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        447⤵
        
        PID:5256
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        448⤵
        
        PID:5628
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        449⤵
        
        PID:5656
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        450⤵
        
        PID:5672
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        451⤵
        
        PID:5340
        
        C:\Users\Admin\AppData\Local\Temp\mutated_15201.exe
        
        "mutated_15201.exe"
        452⤵
        System Location Discovery: System Language Discovery
        
        PID:5712
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        453⤵
        
        PID:5388
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        454⤵
        
        PID:5768
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        455⤵
        
        PID:5784
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        456⤵
        
        PID:5468
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        457⤵
        
        PID:5824
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        458⤵
        
        PID:5840
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        459⤵
        
        PID:5864
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        460⤵
        
        PID:5564
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        461⤵
        
        PID:5904
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        462⤵
        System Location Discovery: System Language Discovery
        
        PID:5920
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        463⤵
        
        PID:5636
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        464⤵
        
        PID:5952
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        465⤵
        
        PID:5988
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        466⤵
        
        PID:6008
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        467⤵
        
        PID:6024
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        468⤵
        
        PID:6048
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        469⤵
        
        PID:6072
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        470⤵
        
        PID:6096
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        471⤵
        
        PID:5796
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        472⤵
        
        PID:6136
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29812.exe
        
        "mutated_29812.exe"
        473⤵
        
        PID:4492
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        474⤵
        
        PID:3608
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        475⤵
        System Location Discovery: System Language Discovery
        
        PID:5152
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        476⤵
        
        PID:5176
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        477⤵
        
        PID:5208
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        478⤵
        
        PID:5956
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        479⤵
        
        PID:5976
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        480⤵
        
        PID:4696
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        481⤵
        
        PID:6028
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        482⤵
        
        PID:6060
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        483⤵
        
        PID:5368
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        484⤵
        
        PID:6092
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        485⤵
        
        PID:6124
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        486⤵
        System Location Discovery: System Language Discovery
        
        PID:5456
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        487⤵
        
        PID:208
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        488⤵
        
        PID:5156
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        489⤵
        
        PID:5188
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        490⤵
        
        PID:5568
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        491⤵
        
        PID:5600
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        492⤵
        
        PID:5616
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        493⤵
        
        PID:5112
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        494⤵
        
        PID:5324
        
        C:\Users\Admin\AppData\Local\Temp\mutated_30560.exe
        
        "mutated_30560.exe"
        495⤵
        
        PID:5276
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        496⤵
        
        PID:5728
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        497⤵
        
        PID:1232
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        498⤵
        
        PID:5808
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        499⤵
        
        PID:5832
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        500⤵
        
        PID:5856
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        501⤵
        
        PID:5888
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        502⤵
        
        PID:5612
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        503⤵
        
        PID:5928
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        504⤵
        
        PID:5560
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        505⤵
        
        PID:5996
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        506⤵
        
        PID:6016
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        507⤵
        
        PID:5264
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        508⤵
        
        PID:5680
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        509⤵
        
        PID:5780
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        510⤵
        
        PID:5372
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        511⤵
        
        PID:5744
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        512⤵
        
        PID:2140
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        513⤵
        
        PID:2552
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        514⤵
        System Location Discovery: System Language Discovery
        
        PID:4760
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        515⤵
        
        PID:4948
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        516⤵
        
        PID:5980
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4.exe
        
        "mutated_4.exe"
        517⤵
        
        PID:6012
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17869.exe
        
        "mutated_17869.exe"
        518⤵
        
        PID:4960
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17869.exe
        
        "mutated_17869.exe"
        519⤵
        
        PID:6108
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17869.exe
        
        "mutated_17869.exe"
        520⤵
        
        PID:932
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17869.exe
        
        "mutated_17869.exe"
        521⤵
        
        PID:5700
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17869.exe
        
        "mutated_17869.exe"
        522⤵
        
        PID:5520
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17869.exe
        
        "mutated_17869.exe"
        523⤵
        
        PID:5552
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17869.exe
        
        "mutated_17869.exe"
        524⤵
        
        PID:5584
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17869.exe
        
        "mutated_17869.exe"
        525⤵
        
        PID:5828
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17869.exe
        
        "mutated_17869.exe"
        526⤵
        
        PID:5860
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17869.exe
        
        "mutated_17869.exe"
        527⤵
        
        PID:5128
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17869.exe
        
        "mutated_17869.exe"
        528⤵
        
        PID:5924
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17869.exe
        
        "mutated_17869.exe"
        529⤵
        
        PID:5404
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17869.exe
        
        "mutated_17869.exe"
        530⤵
        
        PID:5800
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17869.exe
        
        "mutated_17869.exe"
        531⤵
        
        PID:5304
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17869.exe
        
        "mutated_17869.exe"
        532⤵
        
        PID:5344
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17869.exe
        
        "mutated_17869.exe"
        533⤵
        
        PID:5580
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17869.exe
        
        "mutated_17869.exe"
        534⤵
        System Location Discovery: System Language Discovery
        
        PID:3920
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17869.exe
        
        "mutated_17869.exe"
        535⤵
        
        PID:5960
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17869.exe
        
        "mutated_17869.exe"
        536⤵
        
        PID:5684
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        537⤵
        
        PID:5160
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        538⤵
        
        PID:6112
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        539⤵
        
        PID:3108
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        540⤵
        
        PID:5844
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        541⤵
        
        PID:5696
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        542⤵
        
        PID:5940
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        543⤵
        
        PID:5720
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        544⤵
        
        PID:2960
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        545⤵
        
        PID:6044
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        546⤵
        
        PID:5880
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        547⤵
        
        PID:6000
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        548⤵
        
        PID:5732
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        549⤵
        System Location Discovery: System Language Discovery
        
        PID:5972
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        550⤵
        
        PID:6032
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        551⤵
        
        PID:5224
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        552⤵
        
        PID:5268
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        553⤵
        
        PID:2652
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        554⤵
        
        PID:5336
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        555⤵
        System Location Discovery: System Language Discovery
        
        PID:5984
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        556⤵
        
        PID:5532
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        557⤵
        
        PID:5896
        
        C:\Users\Admin\AppData\Local\Temp\mutated_4445.exe
        
        "mutated_4445.exe"
        558⤵
        
        PID:5632
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        559⤵
        
        PID:5576
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        560⤵
        
        PID:5704
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        561⤵
        
        PID:5200
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        562⤵
        
        PID:6064
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        563⤵
        
        PID:5500
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        564⤵
        
        PID:5244
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        565⤵
        
        PID:5776
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        566⤵
        
        PID:4420
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        567⤵
        
        PID:3928
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        568⤵
        
        PID:5936
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        569⤵
        
        PID:1936
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        570⤵
        
        PID:816
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        571⤵
        
        PID:5140
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        572⤵
        
        PID:5452
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        573⤵
        
        PID:5408
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        574⤵
        
        PID:5716
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        575⤵
        
        PID:5308
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        576⤵
        
        PID:5944
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        577⤵
        
        PID:6140
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        578⤵
        
        PID:4488
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20829.exe
        
        "mutated_20829.exe"
        579⤵
        
        PID:5908
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        580⤵
        
        PID:5760
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        581⤵
        
        PID:5688
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        582⤵
        System Location Discovery: System Language Discovery
        
        PID:5124
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        583⤵
        
        PID:5236
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        584⤵
        
        PID:5748
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        585⤵
        System Location Discovery: System Language Discovery
        
        PID:5288
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        586⤵
        
        PID:5464
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        587⤵
        
        PID:5892
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        588⤵
        
        PID:5548
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        589⤵
        
        PID:5496
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        590⤵
        
        PID:5184
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        591⤵
        
        PID:5392
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        592⤵
        
        PID:5964
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        593⤵
        
        PID:5792
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        594⤵
        System Location Discovery: System Language Discovery
        
        PID:5232
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        595⤵
        
        PID:5848
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        596⤵
        
        PID:5668
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        597⤵
        
        PID:5216
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        598⤵
        
        PID:1276
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        599⤵
        
        PID:6120
        
        C:\Users\Admin\AppData\Local\Temp\mutated_5925.exe
        
        "mutated_5925.exe"
        600⤵
        
        PID:5752
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        601⤵
        
        PID:5736
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        602⤵
        
        PID:5136
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        603⤵
        
        PID:5292
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        604⤵
        System Location Discovery: System Language Discovery
        
        PID:5488
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        605⤵
        
        PID:5872
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        606⤵
        
        PID:5644
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        607⤵
        
        PID:5596
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        608⤵
        
        PID:3404
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        609⤵
        
        PID:6080
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        610⤵
        
        PID:5356
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        611⤵
        
        PID:6128
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        612⤵
        
        PID:5420
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        613⤵
        
        PID:5436
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        614⤵
        
        PID:5664
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        615⤵
        
        PID:5144
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        616⤵
        
        PID:5912
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        617⤵
        
        PID:6156
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        618⤵
        
        PID:6172
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        619⤵
        
        PID:6188
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        620⤵
        
        PID:6204
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        621⤵
        
        PID:6220
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11099.exe
        
        "mutated_11099.exe"
        622⤵
        
        PID:6236
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        623⤵
        
        PID:6256
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        624⤵
        
        PID:6280
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        625⤵
        
        PID:6292
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        626⤵
        
        PID:6308
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        627⤵
        
        PID:6324
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        628⤵
        
        PID:6340
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        629⤵
        
        PID:6356
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        630⤵
        
        PID:6372
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        631⤵
        
        PID:6388
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        632⤵
        
        PID:6404
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        633⤵
        
        PID:6420
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        634⤵
        
        PID:6436
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        635⤵
        
        PID:6452
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        636⤵
        
        PID:6468
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        637⤵
        
        PID:6484
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        638⤵
        
        PID:6500
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        639⤵
        
        PID:6516
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        640⤵
        
        PID:6532
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        641⤵
        
        PID:6548
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        642⤵
        
        PID:6564
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        643⤵
        
        PID:6580
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8885.exe
        
        "mutated_8885.exe"
        644⤵
        
        PID:6596
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        645⤵
        
        PID:6616
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        646⤵
        
        PID:6640
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        647⤵
        
        PID:6652
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        648⤵
        
        PID:6668
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        649⤵
        
        PID:6684
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        650⤵
        
        PID:6700
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        651⤵
        
        PID:6716
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        652⤵
        
        PID:6732
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        653⤵
        
        PID:6748
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        654⤵
        
        PID:6764
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        655⤵
        
        PID:6780
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        656⤵
        
        PID:6796
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        657⤵
        
        PID:6812
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        658⤵
        
        PID:6828
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        659⤵
        
        PID:6844
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        660⤵
        
        PID:6860
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        661⤵
        
        PID:6876
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        662⤵
        
        PID:6892
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        663⤵
        
        PID:6908
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        664⤵
        
        PID:6924
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        665⤵
        System Location Discovery: System Language Discovery
        
        PID:6940
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        666⤵
        
        PID:6956
        
        C:\Users\Admin\AppData\Local\Temp\mutated_26458.exe
        
        "mutated_26458.exe"
        667⤵
        System Location Discovery: System Language Discovery
        
        PID:6972
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        668⤵
        
        PID:6992
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        669⤵
        
        PID:7016
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        670⤵
        
        PID:7028
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        671⤵
        
        PID:7044
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        672⤵
        
        PID:7060
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        673⤵
        
        PID:7076
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        674⤵
        
        PID:7092
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        675⤵
        
        PID:7108
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        676⤵
        
        PID:7124
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        677⤵
        
        PID:7140
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        678⤵
        
        PID:7156
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        679⤵
        
        PID:5360
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        680⤵
        System Location Discovery: System Language Discovery
        
        PID:5876
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        681⤵
        
        PID:5516
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        682⤵
        
        PID:6152
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        683⤵
        System Location Discovery: System Language Discovery
        
        PID:5812
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        684⤵
        
        PID:6192
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        685⤵
        
        PID:5472
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        686⤵
        
        PID:6224
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        687⤵
        
        PID:6248
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        688⤵
        
        PID:5536
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        689⤵
        
        PID:6296
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17753.exe
        
        "mutated_17753.exe"
        690⤵
        
        PID:6320
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        691⤵
        
        PID:6344
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        692⤵
        
        PID:6376
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        693⤵
        
        PID:6400
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        694⤵
        
        PID:6416
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        695⤵
        
        PID:5424
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        696⤵
        
        PID:6464
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        697⤵
        System Location Discovery: System Language Discovery
        
        PID:6480
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        698⤵
        
        PID:6504
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        699⤵
        
        PID:6528
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        700⤵
        
        PID:6228
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        701⤵
        
        PID:6568
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        702⤵
        
        PID:6268
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        703⤵
        
        PID:6600
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        704⤵
        
        PID:6300
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        705⤵
        
        PID:6656
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        706⤵
        
        PID:6680
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        707⤵
        
        PID:6364
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        708⤵
        
        PID:6728
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        709⤵
        
        PID:6396
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        710⤵
        
        PID:6768
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29710.exe
        
        "mutated_29710.exe"
        711⤵
        
        PID:6792
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        712⤵
        
        PID:6476
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        713⤵
        
        PID:6508
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        714⤵
        
        PID:6524
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        715⤵
        
        PID:6880
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        716⤵
        
        PID:6904
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        717⤵
        
        PID:6920
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        718⤵
        
        PID:6944
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        719⤵
        
        PID:6628
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        720⤵
        
        PID:6660
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        721⤵
        
        PID:6996
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        722⤵
        
        PID:6692
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        723⤵
        
        PID:6724
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        724⤵
        
        PID:7064
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        725⤵
        
        PID:6756
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        726⤵
        
        PID:6788
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        727⤵
        
        PID:7128
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        728⤵
        
        PID:7152
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        729⤵
        
        PID:5400
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        730⤵
        
        PID:5816
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        731⤵
        
        PID:6884
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        732⤵
        
        PID:6916
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        733⤵
        
        PID:5652
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        734⤵
        
        PID:6948
        
        C:\Users\Admin\AppData\Local\Temp\mutated_344.exe
        
        "mutated_344.exe"
        735⤵
        
        PID:5024
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32670.exe
        
        "mutated_32670.exe"
        736⤵
        
        PID:5384
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32670.exe
        
        "mutated_32670.exe"
        737⤵
        System Location Discovery: System Language Discovery
        
        PID:5528
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32670.exe
        
        "mutated_32670.exe"
        738⤵
        
        PID:6352
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32670.exe
        
        "mutated_32670.exe"
        739⤵
        
        PID:6384
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32670.exe
        
        "mutated_32670.exe"
        740⤵
        
        PID:6408
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32670.exe
        
        "mutated_32670.exe"
        741⤵
        
        PID:7116
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32670.exe
        
        "mutated_32670.exe"
        742⤵
        
        PID:6148
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32670.exe
        
        "mutated_32670.exe"
        743⤵
        
        PID:6496
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32670.exe
        
        "mutated_32670.exe"
        744⤵
        System Location Discovery: System Language Discovery
        
        PID:5620
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32670.exe
        
        "mutated_32670.exe"
        745⤵
        
        PID:6552
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32670.exe
        
        "mutated_32670.exe"
        746⤵
        
        PID:5484
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32670.exe
        
        "mutated_32670.exe"
        747⤵
        
        PID:6184
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32670.exe
        
        "mutated_32670.exe"
        748⤵
        
        PID:6316
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32670.exe
        
        "mutated_32670.exe"
        749⤵
        
        PID:6672
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32670.exe
        
        "mutated_32670.exe"
        750⤵
        
        PID:6260
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32670.exe
        
        "mutated_32670.exe"
        751⤵
        
        PID:6380
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32670.exe
        
        "mutated_32670.exe"
        752⤵
        
        PID:6412
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32670.exe
        
        "mutated_32670.exe"
        753⤵
        
        PID:6088
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32670.exe
        
        "mutated_32670.exe"
        754⤵
        
        PID:6444
        
        C:\Users\Admin\AppData\Local\Temp\mutated_32670.exe
        
        "mutated_32670.exe"
        755⤵
        
        PID:6848
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        756⤵
        
        PID:6424
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        757⤵
        
        PID:6912
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        758⤵
        
        PID:6604
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        759⤵
        
        PID:6536
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        760⤵
        
        PID:6976
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        761⤵
        System Location Discovery: System Language Discovery
        
        PID:7024
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        762⤵
        
        PID:7048
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        763⤵
        System Location Discovery: System Language Discovery
        
        PID:7088
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        764⤵
        
        PID:7112
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        765⤵
        
        PID:7144
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        766⤵
        
        PID:6712
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        767⤵
        
        PID:6040
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        768⤵
        System Location Discovery: System Language Discovery
        
        PID:6900
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        769⤵
        
        PID:6460
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        770⤵
        
        PID:6824
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        771⤵
        System Location Discovery: System Language Discovery
        
        PID:6840
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        772⤵
        
        PID:7000
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        773⤵
        
        PID:7036
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        774⤵
        
        PID:6936
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        775⤵
        
        PID:5448
        
        C:\Users\Admin\AppData\Local\Temp\mutated_17766.exe
        
        "mutated_17766.exe"
        776⤵
        
        PID:7132
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        777⤵
        
        PID:6512
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        778⤵
        
        PID:7080
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        779⤵
        
        PID:7104
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        780⤵
        
        PID:6820
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        781⤵
        
        PID:5764
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        782⤵
        
        PID:6056
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        783⤵
        
        PID:6288
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        784⤵
        
        PID:6752
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        785⤵
        
        PID:3292
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        786⤵
        
        PID:7004
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        787⤵
        
        PID:6312
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        788⤵
        
        PID:6572
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        789⤵
        
        PID:6488
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        790⤵
        
        PID:6196
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        791⤵
        
        PID:6520
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        792⤵
        
        PID:7032
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        793⤵
        
        PID:7072
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        794⤵
        
        PID:6636
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        795⤵
        
        PID:6688
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        796⤵
        
        PID:6348
        
        C:\Users\Admin\AppData\Local\Temp\mutated_6998.exe
        
        "mutated_6998.exe"
        797⤵
        
        PID:6200
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20727.exe
        
        "mutated_20727.exe"
        798⤵
        
        PID:6832
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20727.exe
        
        "mutated_20727.exe"
        799⤵
        
        PID:7008
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20727.exe
        
        "mutated_20727.exe"
        800⤵
        
        PID:6588
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20727.exe
        
        "mutated_20727.exe"
        801⤵
        
        PID:6612
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20727.exe
        
        "mutated_20727.exe"
        802⤵
        
        PID:7100
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20727.exe
        
        "mutated_20727.exe"
        803⤵
        
        PID:6984
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20727.exe
        
        "mutated_20727.exe"
        804⤵
        
        PID:5260
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20727.exe
        
        "mutated_20727.exe"
        805⤵
        
        PID:6708
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20727.exe
        
        "mutated_20727.exe"
        806⤵
        
        PID:5640
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20727.exe
        
        "mutated_20727.exe"
        807⤵
        
        PID:7096
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20727.exe
        
        "mutated_20727.exe"
        808⤵
        System Location Discovery: System Language Discovery
        
        PID:5608
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20727.exe
        
        "mutated_20727.exe"
        809⤵
        
        PID:6240
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20727.exe
        
        "mutated_20727.exe"
        810⤵
        
        PID:6304
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20727.exe
        
        "mutated_20727.exe"
        811⤵
        
        PID:6888
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20727.exe
        
        "mutated_20727.exe"
        812⤵
        
        PID:6432
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20727.exe
        
        "mutated_20727.exe"
        813⤵
        System Location Discovery: System Language Discovery
        
        PID:6988
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20727.exe
        
        "mutated_20727.exe"
        814⤵
        
        PID:5320
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20727.exe
        
        "mutated_20727.exe"
        815⤵
        System Location Discovery: System Language Discovery
        
        PID:6592
        
        C:\Users\Admin\AppData\Local\Temp\mutated_20727.exe
        
        "mutated_20727.exe"
        816⤵
        
        PID:6968
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        817⤵
        
        PID:7040
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        818⤵
        
        PID:6428
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        819⤵
        
        PID:6160
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        820⤵
        
        PID:6336
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        821⤵
        System Location Discovery: System Language Discovery
        
        PID:7068
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        822⤵
        
        PID:6448
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        823⤵
        
        PID:6180
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        824⤵
        
        PID:6252
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        825⤵
        System Location Discovery: System Language Discovery
        
        PID:6852
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        826⤵
        
        PID:6456
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        827⤵
        
        PID:6744
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        828⤵
        
        PID:6284
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        829⤵
        
        PID:6176
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        830⤵
        
        PID:6952
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        831⤵
        
        PID:5252
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        832⤵
        
        PID:6740
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        833⤵
        
        PID:6804
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        834⤵
        System Location Discovery: System Language Discovery
        
        PID:7056
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        835⤵
        System Location Discovery: System Language Discovery
        
        PID:6808
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        836⤵
        
        PID:6816
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        837⤵
        
        PID:6540
        
        C:\Users\Admin\AppData\Local\Temp\mutated_22357.exe
        
        "mutated_22357.exe"
        838⤵
        
        PID:6624
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        839⤵
        
        PID:6584
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        840⤵
        
        PID:6960
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        841⤵
        
        PID:6868
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        842⤵
        
        PID:6368
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        843⤵
        
        PID:7136
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        844⤵
        System Location Discovery: System Language Discovery
        
        PID:5432
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        845⤵
        
        PID:7148
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        846⤵
        
        PID:5512
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        847⤵
        
        PID:2276
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        848⤵
        
        PID:7020
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        849⤵
        
        PID:6736
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        850⤵
        
        PID:7120
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        851⤵
        
        PID:6328
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        852⤵
        
        PID:6208
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        853⤵
        
        PID:6560
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        854⤵
        
        PID:6980
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        855⤵
        
        PID:6720
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        856⤵
        
        PID:6392
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        857⤵
        
        PID:7012
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        858⤵
        
        PID:6772
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        859⤵
        
        PID:6664
        
        C:\Users\Admin\AppData\Local\Temp\mutated_13652.exe
        
        "mutated_13652.exe"
        860⤵
        System Location Discovery: System Language Discovery
        
        PID:6440
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        861⤵
        
        PID:6472
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        862⤵
        
        PID:6896
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        863⤵
        
        PID:6632
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        864⤵
        
        PID:6696
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        865⤵
        
        PID:7052
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        866⤵
        
        PID:6932
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        867⤵
        
        PID:6492
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        868⤵
        
        PID:5296
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        869⤵
        
        PID:6556
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        870⤵
        
        PID:6648
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        871⤵
        
        PID:7180
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        872⤵
        
        PID:7196
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        873⤵
        
        PID:7212
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        874⤵
        
        PID:7228
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        875⤵
        
        PID:7244
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        876⤵
        
        PID:7260
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        877⤵
        
        PID:7276
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        878⤵
        
        PID:7292
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        879⤵
        
        PID:7308
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        880⤵
        
        PID:7324
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        881⤵
        
        PID:7340
        
        C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
        
        "mutated_8783.exe"
        882⤵
        
        PID:7356
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        883⤵
        
        PID:7376
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        884⤵
        
        PID:7400
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        885⤵
        
        PID:7412
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        886⤵
        
        PID:7428
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        887⤵
        
        PID:7444
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        888⤵
        
        PID:7460
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        889⤵
        
        PID:7476
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        890⤵
        
        PID:7492
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        891⤵
        
        PID:7508
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        892⤵
        
        PID:7524
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        893⤵
        
        PID:7540
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        894⤵
        
        PID:7556
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        895⤵
        
        PID:7572
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        896⤵
        System Location Discovery: System Language Discovery
        
        PID:7588
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        897⤵
        
        PID:7604
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        898⤵
        
        PID:7620
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        899⤵
        
        PID:7636
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        900⤵
        
        PID:7652
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        901⤵
        
        PID:7668
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        902⤵
        
        PID:7684
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        903⤵
        
        PID:7700
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29011.exe
        
        "mutated_29011.exe"
        904⤵
        
        PID:7716
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        905⤵
        System Location Discovery: System Language Discovery
        
        PID:7736
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        906⤵
        
        PID:7760
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        907⤵
        
        PID:7772
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        908⤵
        
        PID:7788
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        909⤵
        
        PID:7804
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        910⤵
        
        PID:7820
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        911⤵
        
        PID:7836
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        912⤵
        
        PID:7852
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        913⤵
        
        PID:7868
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        914⤵
        
        PID:7884
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        915⤵
        System Location Discovery: System Language Discovery
        
        PID:7900
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        916⤵
        
        PID:7916
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        917⤵
        
        PID:7932
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        918⤵
        
        PID:7948
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        919⤵
        
        PID:7964
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        920⤵
        
        PID:7980
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        921⤵
        
        PID:7996
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        922⤵
        
        PID:8012
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        923⤵
        
        PID:8028
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        924⤵
        
        PID:8044
        
        C:\Users\Admin\AppData\Local\Temp\mutated_11744.exe
        
        "mutated_11744.exe"
        925⤵
        
        PID:8060
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        926⤵
        System Location Discovery: System Language Discovery
        
        PID:8080
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        927⤵
        
        PID:8104
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        928⤵
        
        PID:8116
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        929⤵
        
        PID:8132
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        930⤵
        
        PID:8148
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        931⤵
        
        PID:8164
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        932⤵
        
        PID:8180
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        933⤵
        
        PID:6216
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        934⤵
        
        PID:6784
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        935⤵
        
        PID:6576
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        936⤵
        
        PID:7176
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        937⤵
        
        PID:7200
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        938⤵
        
        PID:7224
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        939⤵
        
        PID:6544
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        940⤵
        
        PID:7264
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        941⤵
        
        PID:7288
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        942⤵
        
        PID:7312
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        943⤵
        
        PID:7328
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        944⤵
        
        PID:7352
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        945⤵
        
        PID:7360
        
        C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
        
        "mutated_29608.exe"
        946⤵
        
        PID:6856

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

mutated_10096.exe

Path C:\Users\Admin\AppData\Local\Temp\mutated_10096.exe
Size 9.4MB
SHA256 7419ac21a7d63668719e5cb1fd51c31c5b53954ae55059dd7834ea05df5865b7
MD5 eb3597f85882aa1cc48a37277bb1b034
SHA1 4f1265a692bfb98d70fe940b45fb0fab645d162c
SHA512 a011ba275e4b111c34453e019abeb1a1916760c2080c2054ecb60b1d935e968729c2ea83af8baabc2f766b3f2550eecde7b0b2e38e118d54341dc32b7068b315
SSDEEP 98304:M7GpL4IFkDS1foMqv4Yop7IyoB+QBPDE7uZ:M7GpZ31foMqtB+QBPDEc
TLSH
T1BCA649525B970EB0DCE72FB5B59F233D8B25ED368EA90DB8E54CC104A1431986D2FB90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mutated_25455.exe

Path C:\Users\Admin\AppData\Local\Temp\mutated_25455.exe
Size 9.4MB
SHA256 31e4822b8d3011b8b04b713570c0903ebf5beb9f97994b769214d6f312586c2b
MD5 e36e35c7b2cea248b257fa6f2593a324
SHA1 faf75a263256494e3cb495fe0f21cb2c938e8fe4
SHA512 3edb100d1a62583f0186c28fded53285bf8de8aeecf7bc5ab952db2bd4ec5f220447cd94623867bd0e6cc430f209c6bb902c0bf14e342cbc91606e6c6a0f6859
SSDEEP 98304:D7GpL4IFkDS1foMqv4Yop7IyoB+QBPDE7uw:D7GpZ31foMqtB+QBPDE/
TLSH
T1FFA649525B970EB0DCE72FB5B59F233D8B25ED368EA90DB8E54CC104A1431986D2FB90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mutated_27056.exe

Path C:\Users\Admin\AppData\Local\Temp\mutated_27056.exe
Size 9.4MB
SHA256 cdfd7afcbf23458cd6d50a94dcea95f10f746c187c093aa247b8265d745560c0
MD5 18a52b9460967066669bb220f59c8a87
SHA1 f1a8697a73d8415f2d2b5fa17597e4f34ac2dcbc
SHA512 9bbaeba3c3b1e95fab3cf41a0e4da3c3d45bae4d27dbee9f573dd0376a7282ca2070e22db9744561a464db06dfefa03823402cc7f38728853d60e03ec8d66a38
SSDEEP 98304:U7GpL4IFkDS1foMqv4Yop7IyoB+QBPDE7uZ:U7GpZ31foMqtB+QBPDEc
TLSH
T1C2A649525B970EB0DCE72FB5B59F233D8B25ED368EA90DB8E54CC104A1431986D2FB90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mutated_29608.exe

Path C:\Users\Admin\AppData\Local\Temp\mutated_29608.exe
Size 9.4MB
SHA256 9af0b8d1e75444f14437bb5c7a9659be70dec32ab4afc8c96de4a174f6ddf3af
MD5 ba734ba3143c9c7ef9fbe49d4dfee46e
SHA1 cd0ae3331bb891416c3661e1a830c6e3bc090be4
SHA512 3c437b5651824911d90e4db5d545431272825db9da6a58474ba35794923992597f0058630adfdedcb47ea684f15af873d108710da379277411cc77247462b645
SSDEEP 98304:M7GpL4IFkDS1foMqv4Yop7IyoB+QBPDE7u9:M7GpZ31foMqtB+QBPDE6
TLSH
T13DA649525B970EB0DCE72FB5B59F233D8B25ED368EA90DB8E54CC104A1431986D2FB90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mutated_30016.exe

Path C:\Users\Admin\AppData\Local\Temp\mutated_30016.exe
Size 9.4MB
SHA256 607ee09c9850c3389f624b609bba2925c1cf0531e44f54a317f4185141ce6922
MD5 d9fdefd4ab9775d6d72f4bcda9943354
SHA1 ba03d04c1e989091e92f2fac3bc8bbe05fff53b1
SHA512 11ce55277b74b0c79fad7797c55d4c32f4e2ebd750cd863d664491e72cea5ab9383a8269aeecf39ad121bf4f857865a64560277a8294e92b78c8edeaa737de6e
SSDEEP 98304:M7GpL4IFkDS1foMqv4Yop7IyoB+QBPDE7uw:M7GpZ31foMqtB+QBPDE/
TLSH
T1B2A649525B970EB0DCE72FB5B59F233D8B25ED368EA90DB8E54CC104A1431986D2FB90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mutated_8783.exe

Path C:\Users\Admin\AppData\Local\Temp\mutated_8783.exe
Size 9.4MB
SHA256 7b119f48a96cddba7e13e0e09a9ac76289b24b3e8bc470ecb26f10b7e5c8dc99
MD5 d249bcaf9e67d85c72f203c55752e284
SHA1 1f37db13b2cb13fac813cb0fff9a18709c6c1135
SHA512 88695ee5ae7fba5511b5391b97a0f846fa4039802abfee1cbc4cae00cb7af03b4202c756f408c93f9fad97eafb4631df04f2d0fbba3d6a4812d05c0de256547a
SSDEEP 98304:77GpL4IFkDS1foMqv4Yop7IyoB+QBPDE7ub:77GpZ31foMqtB+QBPDE0
TLSH
T198A649525B970EB0DCE72FB5B59F233D8B25ED368EA90DB8E54CC104A1431986D2FB90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/212-112-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/396-27-0x0000000000AF0000-0x0000000001455000-memory.dmp

Download

memory/464-32-0x0000000000AF0000-0x0000000001455000-memory.dmp

Download

memory/552-120-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/712-44-0x00000000005C0000-0x0000000000F25000-memory.dmp

Download

memory/896-131-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/968-73-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/1152-87-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/1272-56-0x00000000005C0000-0x0000000000F25000-memory.dmp

Download

memory/1312-54-0x00000000005C0000-0x0000000000F25000-memory.dmp

Download

memory/1528-77-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/1536-14-0x0000000000AF0000-0x0000000001455000-memory.dmp

Download

memory/1680-134-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/1772-97-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/1904-5-0x0000000000AF0000-0x0000000001455000-memory.dmp

Download

memory/1928-81-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/1980-40-0x00000000005C0000-0x0000000000F25000-memory.dmp

Download

memory/2000-85-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/2072-102-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/2116-62-0x00000000005C0000-0x0000000000F25000-memory.dmp

Download

memory/2252-135-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/2296-34-0x00000000005C0000-0x0000000000F25000-memory.dmp

Download

memory/2316-36-0x00000000005C0000-0x0000000000F25000-memory.dmp

Download

memory/2380-42-0x00000000005C0000-0x0000000000F25000-memory.dmp

Download

memory/2404-16-0x0000000000AF0000-0x0000000001455000-memory.dmp

Download

memory/2424-128-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/2472-116-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/2524-52-0x00000000005C0000-0x0000000000F25000-memory.dmp

Download

memory/2756-8-0x0000000000AF0000-0x0000000001455000-memory.dmp

Download

memory/2852-124-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/2928-38-0x00000000005C0000-0x0000000000F25000-memory.dmp

Download

memory/2964-136-0x00000000007D0000-0x0000000001135000-memory.dmp

Download

memory/3120-114-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/3224-17-0x0000000000AF0000-0x0000000001455000-memory.dmp

Download

memory/3324-108-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/3368-91-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/3436-109-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/3464-28-0x0000000000AF0000-0x0000000001455000-memory.dmp

Download

memory/3472-19-0x0000000000AF0000-0x0000000001455000-memory.dmp

Download

memory/3804-93-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/3808-50-0x00000000005C0000-0x0000000000F25000-memory.dmp

Download

memory/3812-63-0x00000000005C0000-0x0000000000F25000-memory.dmp

Download

memory/3896-67-0x00000000005C0000-0x0000000000F25000-memory.dmp

Download

memory/3904-95-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/3932-71-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/4116-79-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/4148-137-0x00000000007D0000-0x0000000001135000-memory.dmp

Download

memory/4244-69-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/4412-21-0x0000000000AF0000-0x0000000001455000-memory.dmp

Download

memory/4496-130-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/4568-89-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/4600-75-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/4636-117-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/4644-106-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/4704-98-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/4712-46-0x00000000005C0000-0x0000000000F25000-memory.dmp

Download

memory/4716-138-0x00000000007D0000-0x0000000001135000-memory.dmp

Download

memory/4748-48-0x00000000005C0000-0x0000000000F25000-memory.dmp

Download

memory/4840-3-0x0000000000650000-0x0000000000FB5000-memory.dmp

Download

memory/4964-9-0x0000000000AF0000-0x0000000001455000-memory.dmp

Download

memory/4992-83-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/5040-125-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/5056-122-0x0000000000690000-0x0000000000FF5000-memory.dmp

Download

memory/5116-58-0x00000000005C0000-0x0000000000F25000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads