6b0a52a52f94cb7f3eaf05e3f1506835ae69575f9c0e9eed2c32bfdca21e3aa8

Analysis

max time kernel
24s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/10/2026, 08:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_Trojan-ArcBomb.NSIS.Agent.gen.exe
Size 728KB
Sample261014-krqnpsfd22
SHA256 6b0a52a52f94cb7f3eaf05e3f1506835ae69575f9c0e9eed2c32bfdca21e3aa8
MD5 e9ae1911f0dee1602e8bee19902b8100
SHA1 28945f71a92b0e336134841f37e1ee1015219fe4
SHA512 b8be185df509586dccbfecb5fb85ce20f1920f8a9d41077ff37ae32ba233cd8639b5a70b7c8f507a863b0dd90219306ff495c9e4c7dcd1fd35766653308f7013
SSDEEP 12288:ybkyG+rqXZUVUBu12t/IGX3YRsB8dtobP3WcZ7cAcl7ZwW:ybbNrqXZUV8l6W3YRseDE3WcZaFZwW
TLSH
T129F423A1AAA0C099DAC641311197ABBAC6B1B3D297E24D0377401F3FF321791476F1FA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 64 IoCs

pid	Process
3176	Picture4.exe
5684	Picture4.exe
6104	Picture4.exe
4252	Picture4.exe
6136	Picture4.exe
1600	Picture4.exe
5608	Picture4.exe
6108	Picture4.exe
4344	Picture4.exe
1628	Picture4.exe
2804	Picture4.exe
1300	Picture4.exe
1636	Picture4.exe
1812	Picture4.exe
4140	Picture4.exe
3668	Picture4.exe
2684	Picture4.exe
3192	Picture4.exe
1328	Picture4.exe
1052	Picture4.exe
2100	Picture4.exe
2216	Picture4.exe
4660	Picture4.exe
5932	Picture4.exe
1272	Picture4.exe
4712	Picture4.exe
6068	Picture4.exe
2792	Picture4.exe
3128	Picture4.exe
2320	Picture4.exe
2992	Picture4.exe
956	Picture4.exe
716	Picture4.exe
2976	Picture4.exe
4808	Picture4.exe
4404	Picture4.exe
2444	Picture4.exe
5900	Picture4.exe
5288	Picture4.exe
5072	Picture4.exe
5660	Picture4.exe
4224	Picture4.exe
5300	Picture4.exe
4600	Picture4.exe
4328	Picture4.exe
5776	Picture4.exe
2868	Picture4.exe
4168	Picture4.exe
52	Picture4.exe
940	Picture4.exe
5068	Picture4.exe
5336	Picture4.exe
2092	Picture4.exe
2660	Picture4.exe
2280	Picture4.exe
1568	Picture4.exe
4896	Picture4.exe
704	Picture4.exe
812	Picture4.exe
1760	Picture4.exe
4520	Picture4.exe
1028	Picture4.exe
3108	Picture4.exe
4884	Picture4.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Picture4.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1140 wrote to memory of 3176	1140	jaffacakes118_Trojan-ArcBomb.NSIS.Agent.gen.exe	88
PID 3176 wrote to memory of 5684	3176	Picture4.exe	89
PID 5684 wrote to memory of 6104	5684	Picture4.exe	90
PID 6104 wrote to memory of 4252	6104	Picture4.exe	91
PID 4252 wrote to memory of 6136	4252	Picture4.exe	92
PID 6136 wrote to memory of 1600	6136	Picture4.exe	93
PID 1600 wrote to memory of 5608	1600	Picture4.exe	94
PID 5608 wrote to memory of 6108	5608	Picture4.exe	95
PID 6108 wrote to memory of 4344	6108	Picture4.exe	96
PID 4344 wrote to memory of 1628	4344	Picture4.exe	97
PID 1628 wrote to memory of 2804	1628	Picture4.exe	98
PID 2804 wrote to memory of 1300	2804	Picture4.exe	99
PID 1300 wrote to memory of 1636	1300	Picture4.exe	100
PID 1636 wrote to memory of 1812	1636	Picture4.exe	101
PID 1812 wrote to memory of 4140	1812	Picture4.exe	102
PID 4140 wrote to memory of 3668	4140	Picture4.exe	103
PID 3668 wrote to memory of 2684	3668	Picture4.exe	104
PID 2684 wrote to memory of 3192	2684	Picture4.exe	105
PID 3192 wrote to memory of 1328	3192	Picture4.exe	106
PID 1328 wrote to memory of 1052	1328	Picture4.exe	107
PID 1052 wrote to memory of 2100	1052	Picture4.exe	108
PID 2100 wrote to memory of 2216	2100	Picture4.exe	109
PID 2216 wrote to memory of 4660	2216	Picture4.exe	110
PID 4660 wrote to memory of 5932	4660	Picture4.exe	111
PID 5932 wrote to memory of 1272	5932	Picture4.exe	112
PID 1272 wrote to memory of 4712	1272	Picture4.exe	113
PID 4712 wrote to memory of 6068	4712	Picture4.exe	114
PID 6068 wrote to memory of 2792	6068	Picture4.exe	115
PID 2792 wrote to memory of 3128	2792	Picture4.exe	116
PID 3128 wrote to memory of 2320	3128	Picture4.exe	117
PID 2320 wrote to memory of 2992	2320	Picture4.exe	118
PID 2992 wrote to memory of 956	2992	Picture4.exe	119
PID 956 wrote to memory of 716	956	Picture4.exe	120
PID 716 wrote to memory of 2976	716	Picture4.exe	121
PID 2976 wrote to memory of 4808	2976	Picture4.exe	122
PID 4808 wrote to memory of 4404	4808	Picture4.exe	123
PID 4404 wrote to memory of 2444	4404	Picture4.exe	124
PID 2444 wrote to memory of 5900	2444	Picture4.exe	125
PID 5900 wrote to memory of 5288	5900	Picture4.exe	126
PID 5288 wrote to memory of 5072	5288	Picture4.exe	127
PID 5072 wrote to memory of 5660	5072	Picture4.exe	128
PID 5660 wrote to memory of 4224	5660	Picture4.exe	129
PID 4224 wrote to memory of 5300	4224	Picture4.exe	130
PID 5300 wrote to memory of 4600	5300	Picture4.exe	131
PID 4600 wrote to memory of 4328	4600	Picture4.exe	132
PID 4328 wrote to memory of 5776	4328	Picture4.exe	133
PID 5776 wrote to memory of 2868	5776	Picture4.exe	134
PID 2868 wrote to memory of 4168	2868	Picture4.exe	135
PID 4168 wrote to memory of 52	4168	Picture4.exe	136
PID 52 wrote to memory of 940	52	Picture4.exe	137
PID 940 wrote to memory of 5068	940	Picture4.exe	138
PID 5068 wrote to memory of 5336	5068	Picture4.exe	139
PID 5336 wrote to memory of 2092	5336	Picture4.exe	140
PID 2092 wrote to memory of 2660	2092	Picture4.exe	141
PID 2660 wrote to memory of 2280	2660	Picture4.exe	142
PID 2280 wrote to memory of 1568	2280	Picture4.exe	143
PID 1568 wrote to memory of 4896	1568	Picture4.exe	144
PID 4896 wrote to memory of 704	4896	Picture4.exe	145
PID 704 wrote to memory of 812	704	Picture4.exe	146
PID 812 wrote to memory of 1760	812	Picture4.exe	147
PID 1760 wrote to memory of 4520	1760	Picture4.exe	148
PID 4520 wrote to memory of 1028	4520	Picture4.exe	149
PID 1028 wrote to memory of 3108	1028	Picture4.exe	150
PID 3108 wrote to memory of 4884	3108	Picture4.exe	151

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan-ArcBomb.NSIS.Agent.gen.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan-ArcBomb.NSIS.Agent.gen.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1140
- C:\Users\Admin\AppData\Local\Temp\Picture4.exe
  "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:3176
- - C:\Users\Admin\AppData\Local\Temp\Picture4.exe
    "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
    3⤵
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:5684
  - - C:\Users\Admin\AppData\Local\Temp\Picture4.exe
      "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of WriteProcessMemory
      PID:6104
    - - C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:4252
      - C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        6⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:6136
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        7⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1600
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        8⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5608
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        9⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:6108
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        10⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4344
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        11⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:1628
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        12⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2804
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        13⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1300
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        14⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1636
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        15⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:1812
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        16⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4140
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        17⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:3668
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        18⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:2684
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        19⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:3192
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        20⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1328
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        21⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1052
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        22⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2100
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        23⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:2216
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        24⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4660
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        25⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:5932
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        26⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1272
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        27⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:4712
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        28⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:6068
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        29⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:2792
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        30⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3128
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        31⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:2320
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        32⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:2992
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        33⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:956
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        34⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:716
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        35⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:2976
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        36⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:4808
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        37⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4404
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        38⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:2444
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        39⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:5900
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        40⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:5288
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        41⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:5072
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        42⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:5660
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        43⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:4224
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        44⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:5300
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        45⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:4600
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        46⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:4328
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        47⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:5776
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        48⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:2868
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        49⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:4168
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        50⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:52
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        51⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:940
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        52⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:5068
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        53⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:5336
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        54⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:2092
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        55⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:2660
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        56⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:2280
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        57⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1568
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        58⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:4896
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        59⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:704
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        60⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:812
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        61⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1760
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        62⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:4520
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        63⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:1028
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        64⤵
        Executes dropped EXE
        Suspicious use of WriteProcessMemory
        
        PID:3108
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        65⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:4884
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        66⤵
        System Location Discovery: System Language Discovery
        
        PID:4736
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        67⤵
        System Location Discovery: System Language Discovery
        
        PID:2364
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        68⤵
        System Location Discovery: System Language Discovery
        
        PID:2500
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        69⤵
        System Location Discovery: System Language Discovery
        
        PID:4680
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        70⤵
        
        PID:8
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        71⤵
        
        PID:2872
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        72⤵
        System Location Discovery: System Language Discovery
        
        PID:3700
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        73⤵
        System Location Discovery: System Language Discovery
        
        PID:4720
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        74⤵
        System Location Discovery: System Language Discovery
        
        PID:2060
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        75⤵
        
        PID:4236
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        76⤵
        System Location Discovery: System Language Discovery
        
        PID:2492
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        77⤵
        
        PID:1516
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        78⤵
        System Location Discovery: System Language Discovery
        
        PID:5440
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        79⤵
        
        PID:4968
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        80⤵
        
        PID:3576
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        81⤵
        System Location Discovery: System Language Discovery
        
        PID:6056
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        82⤵
        System Location Discovery: System Language Discovery
        
        PID:5192
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        83⤵
        
        PID:4432
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        84⤵
        System Location Discovery: System Language Discovery
        
        PID:4972
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        85⤵
        
        PID:552
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        86⤵
        System Location Discovery: System Language Discovery
        
        PID:2004
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        87⤵
        
        PID:5108
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        88⤵
        
        PID:2820
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        89⤵
        
        PID:1428
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        90⤵
        
        PID:5940
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        91⤵
        
        PID:5324
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        92⤵
        System Location Discovery: System Language Discovery
        
        PID:2428
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        93⤵
        
        PID:4340
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        94⤵
        System Location Discovery: System Language Discovery
        
        PID:3656
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        95⤵
        
        PID:2064
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        96⤵
        
        PID:5892
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        97⤵
        
        PID:4116
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        98⤵
        System Location Discovery: System Language Discovery
        
        PID:4776
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        99⤵
        System Location Discovery: System Language Discovery
        
        PID:1308
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        100⤵
        System Location Discovery: System Language Discovery
        
        PID:2292
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        101⤵
        System Location Discovery: System Language Discovery
        
        PID:4300
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        102⤵
        System Location Discovery: System Language Discovery
        
        PID:1624
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        103⤵
        System Location Discovery: System Language Discovery
        
        PID:4684
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        104⤵
        System Location Discovery: System Language Discovery
        
        PID:2644
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        105⤵
        System Location Discovery: System Language Discovery
        
        PID:1376
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        106⤵
        System Location Discovery: System Language Discovery
        
        PID:2960
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        107⤵
        System Location Discovery: System Language Discovery
        
        PID:2760
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        108⤵
        
        PID:3324
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        109⤵
        System Location Discovery: System Language Discovery
        
        PID:1660
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        110⤵
        System Location Discovery: System Language Discovery
        
        PID:992
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        111⤵
        
        PID:5568
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        112⤵
        
        PID:600
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        113⤵
        
        PID:4480
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        114⤵
        
        PID:4880
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        115⤵
        
        PID:2488
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        116⤵
        
        PID:4256
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        117⤵
        
        PID:4648
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        118⤵
        
        PID:2608
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        119⤵
        
        PID:1940
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        120⤵
        
        PID:5492
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        121⤵
        
        PID:1724
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        122⤵
        
        PID:4816
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        123⤵
        
        PID:952
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        124⤵
        
        PID:6096
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        125⤵
        
        PID:5952
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        126⤵
        
        PID:4944
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        127⤵
        
        PID:4532
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        128⤵
        
        PID:2400
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        129⤵
        
        PID:3352
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        130⤵
        
        PID:1524
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        131⤵
        
        PID:4244
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        132⤵
        
        PID:1912
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        133⤵
        
        PID:2144
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        134⤵
        
        PID:492
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        135⤵
        
        PID:3592
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        136⤵
        
        PID:4268
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        137⤵
        
        PID:2532
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        138⤵
        
        PID:4260
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        139⤵
        
        PID:1148
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        140⤵
        
        PID:3488
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        141⤵
        
        PID:4760
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        142⤵
        
        PID:1592
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        143⤵
        
        PID:1168
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        144⤵
        
        PID:6072
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        145⤵
        
        PID:1864
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        146⤵
        
        PID:900
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        147⤵
        
        PID:4832
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        148⤵
        
        PID:4976
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        149⤵
        
        PID:3384
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        150⤵
        
        PID:3228
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        151⤵
        
        PID:4212
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        152⤵
        
        PID:1992
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        153⤵
        
        PID:5044
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        154⤵
        
        PID:4184
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        155⤵
        
        PID:2600
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        156⤵
        
        PID:3392
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        157⤵
        
        PID:5760
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        158⤵
        
        PID:6084
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        159⤵
        
        PID:1408
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        160⤵
        
        PID:2812
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        161⤵
        
        PID:4156
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        162⤵
        
        PID:1740
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        163⤵
        
        PID:4160
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        164⤵
        
        PID:5540
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        165⤵
        
        PID:5512
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        166⤵
        
        PID:2088
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        167⤵
        
        PID:6052
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        168⤵
        
        PID:4564
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        169⤵
        
        PID:1656
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        170⤵
        
        PID:3496
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        171⤵
        
        PID:1932
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        172⤵
        
        PID:4228
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        173⤵
        
        PID:4868
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        174⤵
        
        PID:3724
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        175⤵
        
        PID:3180
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        176⤵
        
        PID:4492
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        177⤵
        
        PID:2028
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        178⤵
        
        PID:5848
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        179⤵
        
        PID:4292
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        180⤵
        
        PID:772
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        181⤵
        
        PID:5172
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        182⤵
        
        PID:6112
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        183⤵
        
        PID:1804
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        184⤵
        
        PID:1984
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        185⤵
        
        PID:3608
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        186⤵
        
        PID:5888
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        187⤵
        
        PID:4516
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        188⤵
        
        PID:4820
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        189⤵
        
        PID:2908
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        190⤵
        
        PID:6040
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        191⤵
        
        PID:1260
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        192⤵
        
        PID:5700
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        193⤵
        
        PID:3300
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        194⤵
        
        PID:4668
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        195⤵
        
        PID:1472
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        196⤵
        
        PID:3864
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        197⤵
        
        PID:3092
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        198⤵
        
        PID:4640
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        199⤵
        
        PID:2516
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        200⤵
        
        PID:2288
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        201⤵
        
        PID:5092
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        202⤵
        
        PID:1192
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        203⤵
        
        PID:2480
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        204⤵
        
        PID:3960
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        205⤵
        
        PID:4632
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        206⤵
        
        PID:2452
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        207⤵
        
        PID:5768
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        208⤵
        
        PID:2016
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        209⤵
        
        PID:5304
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        210⤵
        
        PID:5352
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        211⤵
        
        PID:2788
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        212⤵
        
        PID:2372
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        213⤵
        
        PID:4092
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        214⤵
        
        PID:5392
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        215⤵
        
        PID:5832
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        216⤵
        
        PID:3268
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        217⤵
        
        PID:3968
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        218⤵
        
        PID:2472
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        219⤵
        
        PID:3848
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        220⤵
        
        PID:724
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        221⤵
        
        PID:1256
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        222⤵
        
        PID:1352
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        223⤵
        
        PID:3348
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        224⤵
        
        PID:5956
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        225⤵
        
        PID:1164
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        226⤵
        
        PID:3948
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        227⤵
        
        PID:5196
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        228⤵
        
        PID:1916
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        229⤵
        
        PID:4112
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        230⤵
        
        PID:5756
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        231⤵
        
        PID:512
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        232⤵
        
        PID:1176
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        233⤵
        
        PID:5264
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        234⤵
        
        PID:4312
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        235⤵
        
        PID:1072
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        236⤵
        
        PID:4280
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        237⤵
        
        PID:4964
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        238⤵
        
        PID:5796
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        239⤵
        
        PID:4080
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        240⤵
        
        PID:4872
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        241⤵
        
        PID:3720
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        242⤵
        
        PID:1320
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        243⤵
        
        PID:3112
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        244⤵
        
        PID:3388
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        245⤵
        
        PID:3624
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        246⤵
        
        PID:2800
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        247⤵
        
        PID:1000
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        248⤵
        
        PID:3468
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        249⤵
        
        PID:2116
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        250⤵
        
        PID:4436
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        251⤵
        
        PID:1924
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        252⤵
        
        PID:1248
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        253⤵
        
        PID:5844
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        254⤵
        
        PID:5688
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        255⤵
        
        PID:264
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        256⤵
        
        PID:6120
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        257⤵
        
        PID:5740
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        258⤵
        
        PID:3880
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        259⤵
        
        PID:3076
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        260⤵
        
        PID:5936
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        261⤵
        
        PID:5328
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        262⤵
        
        PID:1468
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        263⤵
        
        PID:4440
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        264⤵
        
        PID:1848
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        265⤵
        
        PID:4284
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        266⤵
        
        PID:3708
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        267⤵
        
        PID:4400
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        268⤵
        
        PID:3500
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        269⤵
        
        PID:5880
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        270⤵
        
        PID:2852
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        271⤵
        
        PID:3492
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        272⤵
        
        PID:720
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        273⤵
        
        PID:3428
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        274⤵
        
        PID:3236
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        275⤵
        
        PID:3220
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        276⤵
        
        PID:1532
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        277⤵
        
        PID:2496
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        278⤵
        
        PID:1936
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        279⤵
        
        PID:5792
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        280⤵
        
        PID:2716
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        281⤵
        
        PID:6036
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        282⤵
        
        PID:1484
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        283⤵
        
        PID:5008
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        284⤵
        
        PID:5064
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        285⤵
        
        PID:5992
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        286⤵
        
        PID:5532
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        287⤵
        
        PID:5468
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        288⤵
        
        PID:6028
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        289⤵
        
        PID:3172
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        290⤵
        
        PID:4088
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        291⤵
        
        PID:700
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        292⤵
        
        PID:6024
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        293⤵
        
        PID:1332
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        294⤵
        
        PID:4584
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        295⤵
        
        PID:792
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        296⤵
        
        PID:2360
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        297⤵
        
        PID:3800
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        298⤵
        
        PID:1700
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        299⤵
        
        PID:5748
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        300⤵
        
        PID:2636
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        301⤵
        
        PID:4652
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        302⤵
        
        PID:2940
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        303⤵
        
        PID:5228
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        304⤵
        
        PID:5256
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        305⤵
        
        PID:3416
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        306⤵
        
        PID:3036
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        307⤵
        
        PID:6064
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        308⤵
        
        PID:4476
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        309⤵
        
        PID:4616
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        310⤵
        
        PID:1440
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        311⤵
        
        PID:5964
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        312⤵
        
        PID:5580
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        313⤵
        
        PID:4240
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        314⤵
        
        PID:5348
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        315⤵
        
        PID:3616
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        316⤵
        
        PID:1188
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        317⤵
        
        PID:5632
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        318⤵
        
        PID:3904
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        319⤵
        
        PID:1632
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        320⤵
        
        PID:5508
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        321⤵
        
        PID:4700
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        322⤵
        
        PID:4580
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        323⤵
        
        PID:1548
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        324⤵
        
        PID:4924
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        325⤵
        
        PID:2264
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        326⤵
        
        PID:5184
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        327⤵
        
        PID:3280
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        328⤵
        
        PID:2336
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        329⤵
        
        PID:3744
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        330⤵
        
        PID:4768
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        331⤵
        
        PID:4536
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        332⤵
        
        PID:3816
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        333⤵
        
        PID:5404
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        334⤵
        
        PID:4904
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        335⤵
        
        PID:3516
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        336⤵
        
        PID:2568
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        337⤵
        
        PID:3376
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        338⤵
        
        PID:3456
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        339⤵
        
        PID:4956
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        340⤵
        
        PID:3256
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        341⤵
        
        PID:980
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        342⤵
        
        PID:3512
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        343⤵
        
        PID:2964
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        344⤵
        
        PID:5896
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        345⤵
        
        PID:1540
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        346⤵
        
        PID:1972
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        347⤵
        
        PID:5912
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        348⤵
        
        PID:5140
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        349⤵
        
        PID:5784
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        350⤵
        
        PID:1436
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        351⤵
        
        PID:2268
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        352⤵
        
        PID:5808
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        353⤵
        
        PID:1068
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        354⤵
        
        PID:5856
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        355⤵
        
        PID:3296
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        356⤵
        
        PID:4232
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        357⤵
        
        PID:4248
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        358⤵
        
        PID:1224
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        359⤵
        
        PID:5764
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        360⤵
        
        PID:5136
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        361⤵
        
        PID:2848
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        362⤵
        
        PID:3432
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        363⤵
        
        PID:3356
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        364⤵
        
        PID:5344
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        365⤵
        
        PID:2076
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        366⤵
        
        PID:1196
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        367⤵
        
        PID:5276
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        368⤵
        
        PID:3476
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        369⤵
        
        PID:4556
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        370⤵
        
        PID:244
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        371⤵
        
        PID:4732
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        372⤵
        
        PID:1288
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        373⤵
        
        PID:5320
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        374⤵
        
        PID:2888
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        375⤵
        
        PID:5260
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        376⤵
        
        PID:5280
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        377⤵
        
        PID:4388
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        378⤵
        
        PID:4148
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        379⤵
        
        PID:2588
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        380⤵
        
        PID:236
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        381⤵
        
        PID:2668
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        382⤵
        
        PID:4320
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        383⤵
        
        PID:1152
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        384⤵
        
        PID:4136
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        385⤵
        
        PID:1400
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        386⤵
        
        PID:6000
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        387⤵
        
        PID:2376
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        388⤵
        
        PID:4740
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        389⤵
        
        PID:1920
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        390⤵
        
        PID:4100
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        391⤵
        
        PID:3120
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        392⤵
        
        PID:1392
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        393⤵
        
        PID:4672
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        394⤵
        
        PID:780
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        395⤵
        
        PID:4444
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        396⤵
        
        PID:2980
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        397⤵
        
        PID:3984
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        398⤵
        
        PID:4352
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        399⤵
        
        PID:5556
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        400⤵
        
        PID:5720
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        401⤵
        
        PID:708
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        402⤵
        
        PID:2948
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        403⤵
        
        PID:2796
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        404⤵
        
        PID:5620
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        405⤵
        
        PID:1536
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        406⤵
        
        PID:3164
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        407⤵
        
        PID:5648
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        408⤵
        
        PID:5716
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        409⤵
        
        PID:4664
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        410⤵
        
        PID:5016
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        411⤵
        
        PID:4696
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        412⤵
        
        PID:124
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        413⤵
        
        PID:1588
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        414⤵
        
        PID:3672
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        415⤵
        
        PID:412
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        416⤵
        
        PID:2704
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        417⤵
        
        PID:4796
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        418⤵
        
        PID:4636
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        419⤵
        
        PID:1712
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        420⤵
        
        PID:3152
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        421⤵
        
        PID:5156
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        422⤵
        
        PID:6060
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        423⤵
        
        PID:1144
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        424⤵
        
        PID:5060
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        425⤵
        
        PID:876
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        426⤵
        
        PID:5616
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        427⤵
        
        PID:2188
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        428⤵
        
        PID:1824
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        429⤵
        
        PID:1296
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        430⤵
        
        PID:1420
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        431⤵
        
        PID:4208
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        432⤵
        
        PID:1968
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        433⤵
        
        PID:5840
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        434⤵
        
        PID:3860
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        435⤵
        
        PID:1264
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        436⤵
        
        PID:2476
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        437⤵
        
        PID:252
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        438⤵
        
        PID:3620
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        439⤵
        
        PID:3000
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        440⤵
        
        PID:5416
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        441⤵
        
        PID:5284
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        442⤵
        
        PID:2876
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        443⤵
        
        PID:5432
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        444⤵
        
        PID:2332
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        445⤵
        
        PID:996
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        446⤵
        
        PID:1344
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        447⤵
        
        PID:4324
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        448⤵
        
        PID:4912
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        449⤵
        
        PID:5460
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        450⤵
        
        PID:4900
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        451⤵
        
        PID:4824
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        452⤵
        
        PID:2632
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        453⤵
        
        PID:2000
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        454⤵
        
        PID:1564
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        455⤵
        
        PID:2024
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        456⤵
        
        PID:1476
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        457⤵
        
        PID:2560
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        458⤵
        
        PID:3372
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        459⤵
        
        PID:3572
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        460⤵
        
        PID:1464
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        461⤵
        
        PID:2952
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        462⤵
        
        PID:1324
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        463⤵
        
        PID:4892
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        464⤵
        
        PID:2272
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        465⤵
        
        PID:3664
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        466⤵
        
        PID:5972
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        467⤵
        
        PID:3464
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        468⤵
        
        PID:4316
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        469⤵
        
        PID:2284
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        470⤵
        
        PID:4728
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        471⤵
        
        PID:5772
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        472⤵
        
        PID:1116
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        473⤵
        
        PID:4108
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        474⤵
        
        PID:4708
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        475⤵
        
        PID:4124
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        476⤵
        
        PID:2040
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        477⤵
        
        PID:4264
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        478⤵
        
        PID:5544
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        479⤵
        
        PID:2296
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        480⤵
        
        PID:3872
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        481⤵
        
        PID:1756
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        482⤵
        
        PID:2548
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        483⤵
        
        PID:1208
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        484⤵
        
        PID:6080
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        485⤵
        
        PID:4744
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        486⤵
        
        PID:5332
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        487⤵
        
        PID:1528
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        488⤵
        
        PID:2628
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        489⤵
        
        PID:608
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        490⤵
        
        PID:4420
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        491⤵
        
        PID:3232
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        492⤵
        
        PID:5572
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        493⤵
        
        PID:4356
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        494⤵
        
        PID:4508
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        495⤵
        
        PID:2936
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        496⤵
        
        PID:2944
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        497⤵
        
        PID:408
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        498⤵
        
        PID:2896
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        499⤵
        
        PID:3208
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        500⤵
        
        PID:4792
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        501⤵
        
        PID:2956
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        502⤵
        
        PID:972
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        503⤵
        
        PID:3336
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        504⤵
        
        PID:5864
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        505⤵
        
        PID:1084
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        506⤵
        
        PID:2260
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        507⤵
        
        PID:5960
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        508⤵
        
        PID:3216
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        509⤵
        
        PID:4844
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        510⤵
        
        PID:3056
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        511⤵
        
        PID:4840
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        512⤵
        
        PID:4288
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        513⤵
        
        PID:556
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        514⤵
        
        PID:2008
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        515⤵
        
        PID:2528
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        516⤵
        
        PID:5040
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        517⤵
        
        PID:2160
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        518⤵
        
        PID:5272
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        519⤵
        
        PID:2700
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        520⤵
        
        PID:1064
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        521⤵
        
        PID:1228
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        522⤵
        
        PID:2576
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        523⤵
        
        PID:2172
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        524⤵
        
        PID:5692
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        525⤵
        
        PID:4540
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        526⤵
        
        PID:3780
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        527⤵
        
        PID:3844
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        528⤵
        
        PID:5420
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        529⤵
        
        PID:5668
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        530⤵
        
        PID:984
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        531⤵
        
        PID:3320
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        532⤵
        
        PID:4460
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        533⤵
        
        PID:3264
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        534⤵
        
        PID:5644
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        535⤵
        
        PID:2392
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        536⤵
        
        PID:4596
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        537⤵
        
        PID:5356
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        538⤵
        
        PID:4512
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        539⤵
        
        PID:5980
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        540⤵
        
        PID:6076
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        541⤵
        
        PID:5056
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        542⤵
        
        PID:5144
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        543⤵
        
        PID:2652
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        544⤵
        
        PID:580
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        545⤵
        
        PID:1388
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        546⤵
        
        PID:5604
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        547⤵
        
        PID:1652
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        548⤵
        
        PID:4948
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        549⤵
        
        PID:3712
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        550⤵
        
        PID:3788
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        551⤵
        
        PID:4848
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        552⤵
        
        PID:200
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        553⤵
        
        PID:2368
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        554⤵
        
        PID:3312
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        555⤵
        
        PID:4548
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        556⤵
        
        PID:1412
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        557⤵
        
        PID:3052
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        558⤵
        
        PID:5268
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        559⤵
        
        PID:4928
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        560⤵
        
        PID:4276
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        561⤵
        
        PID:1732
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        562⤵
        
        PID:2556
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        563⤵
        
        PID:4876
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        564⤵
        
        PID:816
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        565⤵
        
        PID:4144
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        566⤵
        
        PID:2068
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        567⤵
        
        PID:2196
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        568⤵
        
        PID:2308
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        569⤵
        
        PID:2808
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        570⤵
        
        PID:5012
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        571⤵
        
        PID:3116
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        572⤵
        
        PID:4560
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        573⤵
        
        PID:3060
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        574⤵
        
        PID:2884
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        575⤵
        
        PID:3888
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        576⤵
        
        PID:3728
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        577⤵
        
        PID:3928
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        578⤵
        
        PID:5592
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        579⤵
        
        PID:4576
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        580⤵
        
        PID:3764
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        581⤵
        
        PID:6032
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        582⤵
        
        PID:4644
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        583⤵
        
        PID:2712
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        584⤵
        
        PID:5084
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        585⤵
        
        PID:3792
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        586⤵
        
        PID:3064
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        587⤵
        
        PID:2932
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        588⤵
        
        PID:2880
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        589⤵
        
        PID:1424
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        590⤵
        
        PID:3660
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        591⤵
        
        PID:1780
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        592⤵
        
        PID:1580
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        593⤵
        
        PID:4656
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        594⤵
        
        PID:4488
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        595⤵
        
        PID:4180
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        596⤵
        
        PID:3448
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        597⤵
        
        PID:3408
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        598⤵
        
        PID:6172
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        599⤵
        
        PID:6212
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        600⤵
        
        PID:6252
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        601⤵
        
        PID:6292
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        602⤵
        
        PID:6332
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        603⤵
        
        PID:6372
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        604⤵
        
        PID:6412
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        605⤵
        
        PID:6452
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        606⤵
        
        PID:6492
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        607⤵
        
        PID:6532
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        608⤵
        
        PID:6572
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        609⤵
        
        PID:6612
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        610⤵
        
        PID:6652
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        611⤵
        
        PID:6692
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        612⤵
        
        PID:6732
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        613⤵
        
        PID:6772
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        614⤵
        
        PID:6812
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        615⤵
        
        PID:6852
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        616⤵
        
        PID:6892
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        617⤵
        
        PID:6932
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        618⤵
        
        PID:6980
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        619⤵
        
        PID:7020
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        620⤵
        
        PID:7060
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        621⤵
        
        PID:7100
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        622⤵
        
        PID:7140
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        623⤵
        
        PID:1172
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        624⤵
        
        PID:2648
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        625⤵
        
        PID:6200
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        626⤵
        
        PID:6248
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        627⤵
        
        PID:6284
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        628⤵
        
        PID:6300
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        629⤵
        
        PID:6396
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        630⤵
        
        PID:6436
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        631⤵
        
        PID:6472
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        632⤵
        
        PID:6508
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        633⤵
        
        PID:6544
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        634⤵
        
        PID:6584
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        635⤵
        
        PID:6648
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        636⤵
        
        PID:6708
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        637⤵
        
        PID:6740
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        638⤵
        
        PID:6776
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        639⤵
        
        PID:6840
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        640⤵
        
        PID:6888
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        641⤵
        
        PID:6924
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        642⤵
        
        PID:7004
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        643⤵
        
        PID:7040
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        644⤵
        
        PID:7088
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        645⤵
        
        PID:7108
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        646⤵
        
        PID:1820
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        647⤵
        
        PID:6160
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        648⤵
        
        PID:6224
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        649⤵
        
        PID:6220
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        650⤵
        
        PID:6360
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        651⤵
        
        PID:6408
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        652⤵
        
        PID:6440
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        653⤵
        
        PID:6456
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        654⤵
        
        PID:6556
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        655⤵
        
        PID:6576
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        656⤵
        
        PID:6624
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        657⤵
        
        PID:6620
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        658⤵
        
        PID:6704
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        659⤵
        
        PID:6760
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        660⤵
        
        PID:6824
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        661⤵
        
        PID:6856
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        662⤵
        
        PID:6952
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        663⤵
        
        PID:7044
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        664⤵
        
        PID:7076
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        665⤵
        
        PID:7128
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        666⤵
        
        PID:7160
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        667⤵
        
        PID:2544
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        668⤵
        
        PID:6216
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        669⤵
        
        PID:6304
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        670⤵
        
        PID:6344
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        671⤵
        
        PID:6448
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        672⤵
        
        PID:6484
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        673⤵
        
        PID:6460
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        674⤵
        
        PID:6560
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        675⤵
        
        PID:6608
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        676⤵
        
        PID:6684
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        677⤵
        
        PID:2084
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        678⤵
        
        PID:6804
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        679⤵
        
        PID:4296
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        680⤵
        
        PID:2036
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        681⤵
        
        PID:6944
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        682⤵
        
        PID:6992
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        683⤵
        
        PID:7056
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        684⤵
        
        PID:7124
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        685⤵
        
        PID:7152
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        686⤵
        
        PID:5724
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        687⤵
        
        PID:6176
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        688⤵
        
        PID:6260
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        689⤵
        
        PID:6324
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        690⤵
        
        PID:1696
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        691⤵
        
        PID:6468
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        692⤵
        
        PID:1752
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        693⤵
        
        PID:6636
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        694⤵
        
        PID:6644
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        695⤵
        
        PID:6664
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        696⤵
        
        PID:6784
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        697⤵
        
        PID:2816
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        698⤵
        
        PID:6864
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        699⤵
        
        PID:6972
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        700⤵
        
        PID:6984
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        701⤵
        
        PID:7084
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        702⤵
        
        PID:4764
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        703⤵
        
        PID:2752
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        704⤵
        
        PID:2520
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        705⤵
        
        PID:5708
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        706⤵
        
        PID:6368
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        707⤵
        
        PID:6392
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        708⤵
        
        PID:6488
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        709⤵
        
        PID:6524
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        710⤵
        
        PID:6564
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        711⤵
        
        PID:6700
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        712⤵
        
        PID:6792
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        713⤵
        
        PID:6832
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        714⤵
        
        PID:6836
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        715⤵
        
        PID:6916
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        716⤵
        
        PID:404
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        717⤵
        
        PID:5984
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        718⤵
        
        PID:7096
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        719⤵
        
        PID:7136
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        720⤵
        
        PID:6168
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        721⤵
        
        PID:6240
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        722⤵
        
        PID:6352
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        723⤵
        
        PID:6400
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        724⤵
        
        PID:6444
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        725⤵
        
        PID:6596
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        726⤵
        
        PID:6552
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        727⤵
        
        PID:6604
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        728⤵
        
        PID:6744
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        729⤵
        
        PID:6884
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        730⤵
        
        PID:7008
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        731⤵
        
        PID:6960
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        732⤵
        
        PID:7048
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        733⤵
        
        PID:7024
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        734⤵
        
        PID:6180
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        735⤵
        
        PID:868
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        736⤵
        
        PID:6384
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        737⤵
        
        PID:6312
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        738⤵
        
        PID:6540
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        739⤵
        
        PID:6668
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        740⤵
        
        PID:6720
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        741⤵
        
        PID:6768
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        742⤵
        
        PID:6808
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        743⤵
        
        PID:7016
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        744⤵
        
        PID:4164
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        745⤵
        
        PID:6968
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        746⤵
        
        PID:4780
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        747⤵
        
        PID:7164
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        748⤵
        
        PID:6228
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        749⤵
        
        PID:4128
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        750⤵
        
        PID:5576
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        751⤵
        
        PID:6336
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        752⤵
        
        PID:6588
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        753⤵
        
        PID:5948
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        754⤵
        
        PID:6680
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        755⤵
        
        PID:6828
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        756⤵
        
        PID:6896
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        757⤵
        
        PID:840
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        758⤵
        
        PID:3440
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        759⤵
        
        PID:6988
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        760⤵
        
        PID:7032
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        761⤵
        
        PID:4120
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        762⤵
        
        PID:6196
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        763⤵
        
        PID:6256
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        764⤵
        
        PID:6432
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        765⤵
        
        PID:6516
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        766⤵
        
        PID:6628
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        767⤵
        
        PID:6796
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        768⤵
        
        PID:6736
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        769⤵
        
        PID:6876
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        770⤵
        
        PID:3964
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        771⤵
        
        PID:2032
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        772⤵
        
        PID:2104
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        773⤵
        
        PID:5312
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        774⤵
        
        PID:2764
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        775⤵
        
        PID:6320
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        776⤵
        
        PID:6404
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        777⤵
        
        PID:5872
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        778⤵
        
        PID:976
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        779⤵
        
        PID:1364
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        780⤵
        
        PID:6696
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        781⤵
        
        PID:6780
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        782⤵
        
        PID:3444
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        783⤵
        
        PID:6848
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        784⤵
        
        PID:6844
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        785⤵
        
        PID:256
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        786⤵
        
        PID:4864
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        787⤵
        
        PID:3160
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        788⤵
        
        PID:3028
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        789⤵
        
        PID:6428
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        790⤵
        
        PID:4496
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        791⤵
        
        PID:6632
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        792⤵
        
        PID:4416
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        793⤵
        
        PID:6752
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        794⤵
        
        PID:948
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        795⤵
        
        PID:6128
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        796⤵
        
        PID:7068
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        797⤵
        
        PID:6148
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        798⤵
        
        PID:6276
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        799⤵
        
        PID:6308
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        800⤵
        
        PID:6004
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        801⤵
        
        PID:4916
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        802⤵
        
        PID:6600
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        803⤵
        
        PID:6872
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        804⤵
        
        PID:5216
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        805⤵
        
        PID:1808
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        806⤵
        
        PID:6868
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        807⤵
        
        PID:4380
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        808⤵
        
        PID:6328
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        809⤵
        
        PID:6476
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        810⤵
        
        PID:6548
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        811⤵
        
        PID:1108
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        812⤵
        
        PID:2924
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        813⤵
        
        PID:5732
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        814⤵
        
        PID:3784
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        815⤵
        
        PID:2012
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        816⤵
        
        PID:3244
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        817⤵
        
        PID:6272
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        818⤵
        
        PID:6504
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        819⤵
        
        PID:3696
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        820⤵
        
        PID:3144
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        821⤵
        
        PID:1180
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        822⤵
        
        PID:624
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        823⤵
        
        PID:2844
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        824⤵
        
        PID:6996
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        825⤵
        
        PID:6192
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        826⤵
        
        PID:6376
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        827⤵
        
        PID:6580
        
        C:\Users\Admin\AppData\Local\Temp\Picture4.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Picture4.exe"
        828⤵
        
        PID:4592

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Picture4.exe

Path C:\Users\Admin\AppData\Local\Temp\Picture4.exe
Size 706KB
SHA256 5df2e2a4a664fe8601e4d250b010fe995495502938714b1ef7e755cf2d2b3321
MD5 5ba338cc48e902b6199f417c9360d73b
SHA1 4970c475d16b991e50db79a2daa559bb60499ba5
SHA512 6a94dea8d07307a1d2805dacaa97e6aa963a3910eae45b1ccef3ccc9362cb6570b5616242eadbed06aab345368285d2609974dcfe045cb15021cb5d0c37df630
SSDEEP 12288:ojGzdRXZKBURu1XMGIGn3Y9sB3dPobP3tcZ7ZAcv7Zpg:ojKdRXZKBwieY3Y9sRVE3tcZrTZpg
TLSH
T1AAF423A1AEA4C0DEDAC5413012976BB6C671F39297B25843B7440F3FE311791476F2BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download