Behavioral Analysis

00e1b5fbe988040bc1d8d730a6409b191c9d44d3.exe "C:\Users\Administrator\AppData\Local\Temp\00e1b5fbe988040bc1d8d730a6409b191c9d44d3.exe"

taskhost.exe "taskhost.exe"

dwm.exe "C:\Windows\system32\Dwm.exe"

explorer.exe C:\Windows\Explorer.EXE

mobsync.exe C:\Windows\System32\mobsync.exe -Embedding

WinMail.exe "C:\Program Files\Windows Mail\WinMail.exe" -Embedding