A pharmaceutical company was recently compromised by ransomware. Given the following EDR output from the process investigation:

On which of the following devices and processes did the ransomware originate?

A$.$ cpt$-$ws$018,$ powershell.exe

B$.$ cpt$-$ws$026,$ DearCry.exe

C$.$ cpt$-$ws$002,$ NO$-$AV$.$exe

D$.$ cpt$-$ws$026,$ NO$-$AV$.$exe

E$.$ cpt$-$ws$002,$ DearCry.exe